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SQL Server Magazine 


Is 10 Years Olle? 


Ithough it hardly seems possible, this issue 

marks the tenth anniversary of SQL Server 
Magazine. As long-time readers will remember, 
we launched the magazine in the SQL Server 7.0 
timeframe. Back in 1998, SOL Server was a distant 
third in the enterprise database market and was 
regarded as a small-scale departmental database— 
easy to use but not ready for the enterprise. How 
things have changed. 


SQL Server 7.0: Re-Architecture 

The release of SQL Server 7.0 marked the ascen- 
sion of SQL Server into the enterprise. Microsoft 
brought in a core group of experienced database 
designers who rewrote the old Sybase code that was 
the basis of earlier releases. As David Campbell, 
Microsoft Technical Fellow іп the Data and Plat- 
form division, said last year, ^A bunch of us came 
to Microsoft from different database experiences. 
We had guys who worked on IBM DB2, Tandem, 
Oracle, Sybase, Informix. We landed at Microsoft 
in 1994, 1995, and 1996, and we started the effort 
to re-architect SQL Server. The first version was 
SQL Server 7.0.” The new code base gave SQL 
Server 7.0 the enterprise scalability that previous 
versions lacked and, combined with the innovative 
idea of including business intelligence (BI) capa- 
bilities in the form of OLAP Services, catapulted 
SQL Server to the front of the BI industry. 


SQL Server 2000: Evolution 

Released in September 2000, SOL Server 2000 was 
an evolutionary release. OLAP Services became 
SQL Server Analysis Services (SSAS), and Mi- 
crosoft added data mining. In addition, Microsoft 
introduced support for multiple instances, feder- 
ated servers, and distributed partitioned views. The 
SQL Server team took its first steps on the path 
toward XML integration with support for XML 
Views and OPENXML. SQL Server 2000 firmly 
established SQL Server as an enterprise player. 


SQL Server 2005:The BI Revolution 


Five years later, Microsoft released SQL Server 
2005, which could be called the BI release. All of 
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SQL Server's BI functionality benefited from up- 
grades. DTS was replaced by the new enterprise- 
capable SQL Server Integration Services (SSIS). 
SSAS was revamped with the new Unified Dimen- 
sional Model. SQL Server 2005 added support for 
SQL Server CLR, a native XML data type, and a 
new VARBINARY(MAX) data type for large ob- 
ject storage. Service Broker and SQL Server Report- 
ing Services (SSRS) subsystems were also added. 
Without a doubt the most important element, SSRS 
was embraced by businesses everywhere. 


SQL Server 2008: 

The Database Platform 

SQL Server 2008 marked SQL Server’s transition 
from a relational database to an enterprise data plat- 
form. Released to manufacturing in August 2008, 
SQL Server 2008 moved to make database data 
available throughout the enterprise. For better man- 
agement, Microsoft added Resource Governor, pol- 
icy-based management, and database compression. 
The addition of transparent database encryption 
improved security. For development, SQL Server 
2008 has LINQ, the .NET Entity Framework, spa- 
tial data types, and FILESTREAM support. For BI 
there are all-new cube and dimension designers, as 
well as Report Builder and Microsoft Office integra- 
tion. Feature-wise, SQL Server 2008 is a leader in 
the database market. 


Nonstop Passion for SQL Server 

Here at SQL Server Magazine we've had the plea- 
sure of covering all these developments over the 
past ten years. I know I speak for everyone at 
the magazine when I say that we're fortunate and 
proud to work with the best SOL Server experts 
and authors in the industry. Our editors and con- 
tributing writers are dedicated to serving the needs 
of the SQL Server community and providing the 
best independent technical SQL Server informa- 
tion available. Following SQL Server for the past 
10 years has been a terrific ride. We all know that 
SQL Server is the greatest database around and 
that the best is yet to come. Е 
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(motey@ sqlmag.com) is technical director 
for Windows IT Pro and SQL Server Maga- 
zine and author of Microsoft SQL Server 

2008 New Features (Osborne/McGraw-Hill). 
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3 Free Tools that Prevent 
SQL Injection Attacks 


Find vulnerabilities in your websites and databases 


before attackers do 


E arlier this year, there was a noticeable upsurge in 
the number of SQL injection attacks perpetrated 
against users of Microsoft technologies. SQL injection 
is a common technique that exploits unfiltered entry 
fields on a web application. For example, let’s say you 
have an application that lets users enter their first and 
last name in separate entry fields on a web page. A 
typical user might enter Bob, Savannah, or Nguyen in 
an entry field. However, a malicious user might enter 
“Robert'); DROP TABLE students;--," which would 
wreak havoc in the application. This type of attack 
is called a SQL injection attack because the attacker 
has appended, or injected, an SQL statement into the 
entry field. 


Protect Your ASP 
and ASP.NET Applications 
SQL injection attacks don’t occur on only SQL Server 
databases backing ASP and ASP.NET front-end appli- 
cations; they can also occur on PHP applications with 
MySQL back ends and Java applications with Oracle 
back ends. All database platforms are vulnerable to 
SQL injection attacks. You can prevent such attacks 
by filtering entry fields on your web pages so that only 
allowable values are permitted. 

Because of the upsurge in SQL injection attacks, 
Microsoft has published an important security advi- 
sory that’s available at www.microsoft.com/technet/ 


security/advisory/954462.mspx. The advisory points 


to the following three tools that you can use with your 

ASP and ASP.NET applications to prevent SQL injec- 

tion attacks: 

* HP Scrawlr— This free scanner utility can detect 
and identify whether your website is susceptible to 
an SQL injection attack. The utility crawls a web- 
site, analyzing the entry fields of each web page for 
SQL injection vulnerabilities as it goes. (Note that 
it doesn't work against JavaScript, flash parsing, or 
POST parameters.) You can learn more about HP 
Scrawlr at www.communities.hp.com/security 
software/blogs/spilabs/archive/2008/06/23/finding- 
sql-injection-with-scrawlr.aspx. 

* URLScan—This security tool actively restricts the 
type of HTTP requests that Microsoft IIS processes. 
URLScan isn't a substitute for properly program- 
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ming a web application, but it can prevent some 
potentially harmful requests from reaching the web 
application and SQL Server. It works on IIS 5.1 and 
later, including IIS 7.0 for Windows Server 2008. 
For more information about URLScan, go to 
learn.iis.net/page.aspx/473/using-urlscan. 

* Microsoft Source Code Analyzer for SQL 
Injection—This command-line tool analyzes 
your static ASP source code written in VBScript 
(not ASP.NET) and reveals possible vulnerabilities 
to SQL injection attacks. The tool then generates 
a report detailing the vulnerabilities it detected 
and possible remedies. Microsoft Source Code 
Analyzer for SQL Injection is available at www 
microsoft.com/downloads/details.aspx?Family 
Id=58A7C46E-A599-4FCB-9A B4-A4334146 
B6BA&displaylang-en. 


Design and Develop 
Applications with 

Security in Mind 

Although each of these tools can help prevent an 
attacker from penetrating and damaging your website 
and SQL Server database, none of them are as effective 
as designing and developing your application with secu- 
rity in mind. SQL injection is an old style of hacking 
websites, and it's quite easy to prevent when value 
checks are written into the code from the beginning. 
For more information 
about preventing SQL 
injection attacks, see 


Kevin Kline 


kevin.kline @ quest.com) is the director of 


technology for SQL Server Solutions at Quest 
Software and a founding board member of 
the international Professional Association for 
SQL Server. He is the author of $QL in a 
Nutshell, 2nd edition (O'Reilly). 


the Learning Path. I 
recommend reading 
*Hack Your Database 
Before the Hackers 
Do, Мау 2008, 
InstantDoc ID 98576, 
to learn more about 
how to protect your 
websites and databases 
from SQL injection 
attacks. MSDN also 
offers many articles on 
that topic. SQL] 

InstantDoc ID 100720 
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For more information about preventing SQL injection 
attacks: 

"Hack Your Database Before the Hackers Do," 
InstantDoc ID 98576 

"Protecting Your Organization from SQL Injection 
Attacks," InstantDoc ID 99344 

"Defend Your Systems Against SQL Injection 
Attacks," InstantDoc ID 49181 


MICROSOFT RESOURCES 
"Preventing SQL Injections in ASP" 


msdn.microsoft.com/en-us/library/cc676512.aspx 
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Dave Campbel 
on SOL Server 2008, 
Cloud Services, 


Sheila Molnar 


(smolnar@ sqlmag.com) is executive editor, 


developer content, for SQL Server Magazine, 


Windows IT Pro, and WinDevPro.com, the 
developer website. Formerly, she managed 
SDK and IT pro content teams at Microsoft. 


10 February 2009 


and More 


Dave Campbell, a Microsoft technical fellow in the 
Data and Platform division and SQL Server racon- 
teur, met with Karen Forster and me for a lively dis- 
cussion about SQL Server—past, present, and future. 
We quizzed him about SQL Server 2008s features and 
SQL Server’s path to the cloud. Campbells comments 
about SQL Services, the upcoming Kilimanjaro re- 
lease, and the Madison project illuminate changes on 
the horizon in the way you'll deal with data. 


SQL Server Magazine: Did you know that February 
is the 10th anniversary of SQL Server Magazine? 


Campbell: Pretty exciting! Congratulations. 


SQL Server Magazine: Thanks! What about SQL 
Server 2008 excites you most? 


Campbell: I'm excited about the amount of features 
we were able to get into it in less than three years. 
The story behind the story is that we completely re- 
designed the process for how we make SQL Server. 
We envisioned a world with millions of servers and 
millions of enterprise database servers. Then we rede- 
signed the product with that in mind, to make it take 
care of itself and to make it much easier to care for. 


SQL Server Magazine: What was your role in this 
process? 


Campbell: In SQL Server 2005, I ran a good chunk 
of the product development team. I went to Paul 


Flessner [then the vice president of Microsoft’s Data 
and Storage division] when we were getting ready to 
ship SQL Server 2005 and said, “Hey we're no longer 
chasing tail lights. We're in the leaders’ pack now, and 
there are a bunch of things we can do to distinguish 
ourselves from the others.” I put together a team that 
looked at the market, the needs of our customers and 
ISVs, how we built the product, and the return on our 
engineering investment. We prioritized things, such 
as merge statements, that people had requested for a 
long time, and got them done. 

We noticed that space and time would become in- 
tegral data types going forward, so we added support 
for spatial data types in SQL Server 2008. We also 
noticed that even though SQL Server is easier than a 
lot of other database products to manage server-per- 
server, managing thousands of SQL Servers was still 
a lot of work. So that’s how policy-based manage- 
ment came about. It really reduces the administrative 
burden if you can define a few classes of service (the 
mission-critical server, the workgroup server, the tier- 
2 server, the one that’s under someone’s desk), define 
policies for those classes, bind those servers to one 
of those classes, and make sure that they remain in 
compliance. 
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What he thinks about the latest 
SQL Server release, Kilimanjaro, 
Madison, and Azure 


SQL Server Magazine: What are the big trends you're 
seeing in data management? 


Campbell: There are three things to think about. 
We're entering a world in which the cost of acquir- 
ing data is going to zero. Everything is born digital 
today. The cost of storing data 1s approaching media 
cost. The final thing is ubiquitous connectivity and 
increase in bandwidth. Those three things together 
are transformative. 


SQL Server Magazine: What impact will lower 
storage costs have on SQL Server? 


Campbell: People need the right data, in the right 
form, in the right place, at the right time. CIOs and 
CTOs want to know if we can do it faster and cheaper 
than the other guys. There are some areas in the data 
warehouse market where we have not seriously gone 
—yet. 


SQL Server Magazine: Are you referring to the 
Madison project? 


Campbell: We see more businesses not wanting to 
throw data away, so they're building larger data 
warehouses. The ability to collect, mine, analyze, and 
provide information back to the business can be the 
difference between success and failure. The Madi- 
son project, which is the work we’ve done with the 
DATAllegro acquisition, is going to let us get into the 
market in the data warehousing space into the hun- 
dreds of terabytes. The volume is staggering. I think 
that as people store more and purge less often, they 
can analyze things over time and look for historical 
trends. These trends are the basis by which we do pre- 
dictive analytics to infer correlations over time and 
predict into the future. 


SOL Server Magazine: How does Kilimanjaro fit into 
this picture? 


Campbell: The other half of the story is how do we 
take the data and the information in the large data 
warehouse and get it out to the people who are actu- 
ally doing the work and making decisions every day. 
We want to enable both the very large data ware- 
houses and self-service business intelligence (BI). It’s 
not just enough to produce the reports; it’s about 
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putting information in the end-user's and informa- 
tion analyst's hands so they can slice it and dice it, 
and add information that may be available only from 
their workgroup. А major theme of the Kilimanjaro 
release is self service. 


SQL Server Magazine: In addition to self service, 
what are the other elements of Kilimanjaro? 


Campbell: SQL Server will have greater than 64-bit 
hardware platform thread support in the relational 
engine. Another theme is multiserver management. 
Consider friction in terms of self-service. Can you 
provision servers easily? For companies that have 
hundreds or thousands of SQL Servers, the multi- 
server management aspect of Kilimanjaro will enable 
the administrator to manage them all as a unit. 


SQL Server Magazine: Can you discuss why SQL 
Server and storage are in the same division at 
Microsoft? 


Campbell: That’s on purpose! Go back to my point 
that all data is born digital. Things that aren’t properly 
stored in the database directly still need the account- 
ability and control that you want in a database. The 
unstructured data world and the structured data world 
are coming together. There are three motivating forces 
for this: One is that there are just so many of these 
unstructured data things. Wouldn’t you like a database 
to manage all the files on your computer, for example? 
The second is that unstructured data often has other 
attributes. For example, attributes of instant message 
conversations include the person it’s from, the person 
it’s to, and the date. The third is feature extraction. We 
can do text indexing of that IM conversation. There’s 
value in being able to query over it. 

One big advance in SQL Server 2008 is the 
FILESTREAM data type. If you’re building an ap- 
plication that’s going to store blogs, do you put them 
in the file system and store the name in the database, 
or do you stick them in the database? Everyone’s got 
their own opinion. We wanted to just take the debate 
out of the situation and say that we’re going to use the 
file system for the best of what it does and the data- 
base for what it does. Working with the storage teams 
allowed us to bring those two distinct worlds together 
and add more value. 


“Our vision is 
to extend the 
data platform 
to the cloud. 
Azure is about 
moving data- 
bases from the 
world of the 
LAN to the 
world of the 
Internet. The 
Azure platform 
is another 
dimension of 
self service.” 
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12 February 2009 


DAVE CAMPBELL INTERVIEW 


SQL Server Magazine: This discus- 
sion brings WinFS to mind. 


Campbell: A lot of what we've 
shipped in the last year or two is 
stuff that was a part of WinFS: The 
entity framework, the entity data 
model, FILESTREAM integration, 
the synchronization framework. It's 
just a different way to get it to market 
sooner. When we decided we weren't 
going to put WinFS into the version 
of Windows that became Vista, we 
said that this technology is going to 
go forward. It'll surface first through 
SQL Server. 


SQL Server Magazine: How does 
SQL Server work with Microsoft 
Visual Studio and Microsoft Office? 


Campbell: Ten years ago, people 
made purchasing decisions based on 
the capabilities of the relational da- 
tabase engine. We no longer think of 
SQL Server as a database server. We 
think of it as a data platform with 
broader horizontal services. For BI, 
we have extraction, transformation, 
and loading (ETL) in the box, and 
we have the ability to connect that 
with SharePoint. We have the abil- 
ity to connect with Visual Studio. 
We've been using the Visual Studio 
shell for the ETL design environ- 
ment, so theres a commonality of 
skills. We did a scenario with Vi- 
sual Studio 2008 called Occasionally 
Connected Systems for people who 
want to build mobility apps and not 
worry about whether the state of the 
data is connected or not connected. 
Synchronization is a key part of the 
data platform. АП of this stuff is in 
the box. 


SQL Server Magazine: What value 
does LINQ add to SQL Server 2008? 


Campbell: I think about how to re- 
duce the friction for building applica- 
tions. There’s been a huge impedance 
mismatch between the application 
logic and the database interface layer. 
And if you go back 15 to 20 years, 
whether it was database integration 
with COBOL or database precompil- 
ers, in some ways we were in a better 


spot than we had been when we went to the call-level 
interfaces. So think about ODBC: It opened the da- 
tabase up to a larger class of development environ- 
ments. But for the developer it was a little harder for a 
while. I think LINQ will do a great job of letting de- 
velopers express queries in very natural ways that are 
easy to consume in their programs, whether they're 
against the database or whether they're against in- 
memory structures or in XML. 


SQL Server Magazine: What are your thoughts on 
the Azure Services Platform and delivering the data 
platform as a service? 


Campbell: Our vision is to extend the data platform 
to the cloud. The Azure platform is another dimen- 
sion of self service. So today, in the provisioning of a 
database, you need to go find the server; you need to 
go find disk space. Imagine if you could just provision 
a database endpoint and wherever you had Internet 
access you could get at that database endpoint. That's 
an aspect of self service. Azure is about moving da- 
tabases from the world of the LAN (client/server) to 
the world of the Internet. Think of how client/serv- 
er databases liberated data and allowed us to bring 
it down to peoples’ desktops and PCs. The services 
world will liberate data beyond the corporate LAN 
and out to any authorized person with an Internet 
connection. 


SQL Server Magazine: What other work can devel- 
opers do with the Azure platform? 


Campbell: It fascinates me to see the new types of ap- 
plications that people are building. A lot of people 
think “I’m not going to move my line-of-business ap- 
plications to the cloud." And I agree with them. But 
I see many scenarios, such as supply-chain, business- 
to-business, electronic design automation, and prod- 
uct lifecycle management, where corporations can 
share data, put data up on a data hub, and share data 
from one device to another. 

We announced Project Huron in the SQL Serv- 
ices Labs at the Professional Developers Conference. 
Huron lets you take an Access database, publish it 
into SQL Services, and then let authorized people 
subscribe to it. It pulls the application down but also 
synchronizes all of the data. It's a data hub. Indi- 
vidual clients don't need to be connected with each 
other; they just need to be able to connect to the hub. 
The data is secure and backed up on the hub. This 
opens up a number of new scenarios for develop- 
ers. We've announced some support for data mining 
and reporting in SQL Services Labs as well. Data 
integration services will be another interesting piece: 
You'll be able to pull data from multiple places into 
a hub and then do some BI activity over it. 
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SOL Server Magazine: What else should readers 
know about data hubs? 


Campbell: With SQL Services you'll be able to build 
out the generic data hubs and reduce friction. We'll 
be working with the .NET Services team, also a part 
of the Azure platform, to do the access control for it, 
so you can take your existing Active Directory infor- 
mation and federate it by projecting it into the cloud. 
Plus you'll be able to write authorization policies over 
the data to securely share it across a set of applica- 
tions and people. 


SQL Server Magazine: How do you think SQL Data 
Services (SDS) will add value to the platform in the 
cloud? 


Campbell: SDS is just the first of a number of servic- 
es. With SDS you don't have to know where the ma- 
chine is. The SDS model is inherently multitenanted. 
If you're developing an application, you can focus on 
that application, and as part of the installation pro- 
cess you can have an endpoint provisioned. You don't 
have to worry about how to scale databases to peta- 
bytes. We built the abstractions in SDS with multi- 
tenancy in mind. 


SQL Server Magazine: SDS completely changes the 
idea of the corporate database. Your database be- 
comes much more abstract than in the past. 


Campbell: Today one of the challenges a corporation 
faces is where to put its databases. A database used to 
be under someone's desk. Now imagine that IT can 
say “ГЇЇ let you provision databases at Internet end- 
points.” АП a developer has to say is “provision me 
an endpoint for 10GB” or something like that. A lot 
of big corporations have self-provisioning of Share- 
Point sites; it's really easy to do. Imagine in this model 
that developers don't have to wait for new hardware. 
They don't have to wait to talk to the IT staff to get 
a virtual machine set up. It's just a matter filling out a 
form requesting a database, getting an endpoint, and 
then developing your app. It will increase agility and 
reduce friction in that space. 


DAVE CAMPBELL INTERVIEW 


SQL Server Magazine: In an article in SOL Server 
Magazine UPDATE [“Cloud Computing: How Will 
It Affect Corporate IT?" www.sglmag.com, Instant- 
Doc ID 99835], Brian Moran says cloud computing 
is a little scary because there won't be a need for cor- 
porate IT anymore. 


Campbell: I don't think that at all. I think 
it will open up more opportunity. A lot 
of people confuse cloud computing 
with outsourcing your hosting— 
just take the whole mess and give 

it to me. I think if cloud comput- 
ing is done right, people can focus 

on one thing and do it very well. 
Then there's an opportunity for 

IT to have a higher degree of in- 
terdependence and remake the val- 
ue chain, not just the supply chain. 


SQL Server Magazine: So what skill 
set should DBAs and developers be 
acquiring? 


Campbell: I would think about the data lifecycle 
from birth to archival. We have to wake up and think 
of a world in which the cost of data acquisition has 
gone to zero. The cost of data storage has gone to 
zero. And bandwidth is a bit of a constraint. Latency 
will be a constraint. Just think about it—we're in a 
world where you can collect vast amounts of data 
and process it. If you can detect correlations between 
things, in order to exploit them for business value, 
you don't even have to understand causality; you just 
know that there's a correlation. Work with data is 
just going to continue to change dramatically. More 
and more I see businesses that can capitalize on that. 
That's the difference between success and failure. 
The frame of mind your readers need in order to 
face the future isn’t, “Who’s going to take my data- 
base and move it to the cloud?" It's about imagining 
you have the platform pieces in place to build a ge- 
neric synchronized data hub. ЕП 
InstantDoc ID 101093 
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or table-valued parameters 


inputs. One solution is to use 
dynamic SQL, but as I explain in “Handling Arrays” 
(December 2008, InstantDoc ID 100453), this solution 
has both security and performance problems. Another 
solution uses a T-SQL user-defined function (UDF) 
that splits an array into its elements. The function 
accepts a string with a comma-separated list of values 
as input and returns a table result with a row for each 
element. This solution is secure and more efficient than 
the dynamic SQL approach, but it's also quite com- 
plicated, as I explain in ^Handling Arrays as Inputs" 
(January 2009, InstantDoc ID 100657). 

Here are two other solutions. One implements a 
Common Language Runtime (CLR) UDF that splits 
an array into its elements. The other technique uses 
SQL Server 2008's new table-valued parameters. 


Server DBAs need to know 
how to handle arrays as 


CLR Split UDF 
SQL Server 2005 introduced CLR integration, which 
lets you develop routines with .NET languages. T-SQL 
is useful for certain types of tasks, especially tasks that 
involve data manipulation; however, T-SQL isn't ideal 
for tasks such as splitting arrays that involve string 
manipulation and iterative logic. Procedural languages 
such as .NET languages are better than T-SQL at per- 
forming such tasks. .NET languages typically provide 
better performance, richer capabilities, апа simpler 
implementation. (For more information about T-SQL 
vs. CLR, see *CLR or Not CLR: Is That the Ques- 
tion?" April 2006, InstantDoc ID 49429.) 

A CLR version of a UDF that splits a string with 
a comma-separated list of values to the individual ele- 
ments is simple to implement because the string type 
supports a method called Split that already implements 
the split logic. Listing 1, page 16, uses C£ to define such 
a UDF (This listing 15 courtesy of Dejan Sarka and 
Steve Kass.) Listing 1% function header sets the Fill- 
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RowMethodName attribute to "ArrSplitFillRow." Arr- 
SplitFillRow is a method that is defined after the fn. split 
CLR function’s definition, and its purpose is to convert 
the input object to a string. The header also defines an 
attribute called TableDefinition with the schema of the 
output table; this attribute is required in the header only 
if you want to deploy the assembly in the database from 
Visual Studio as opposed to using manual deployment. 
The function invokes the built-in Split method of the 
string type to split the input array. 

Before you deploy the function in the Northwind 
database, run the following code to ensure that any 
existing version of the fn split UDF is dropped: 


Itzik Ben-Gan 


itzik@ solidq.com) is cofounder of Solid 
Quality Mentors. He manages the Israeli SQL 


Server Users Group and is the author of 
Microsoft SQL Server 2008: T-SQL Fundamentals 
(Microsoft Press, 2008) and coauthor of the 
Inside Microsoft SQL Server 2008: Inside T-SQL 


USE Northwind: series (Microsoft Press, 2009). 


IF OBJECT ID('dbo.fn split', 'IF') IS NOT NULL 
DROP FUNCTION dbo.fn split; 


ORE on «һе WEB 


Download the listings at 
InstantDoc ID 100975. 


Next, follow the instructions in “5 Steps for 
Developing and Deploying CLR Code in SQL 
Server" (April 2006, InstantDoc ID 49479) to 
deploy the fn split function from Listing 1 
in the Northwind database. Name the project SplitCLR, 
and specify the C drive as the location for the project 
folder. Then run the code in Listing 2, page 16. 
to create the usp getorders procedure. This pro- 
cedure accepts a string with a comma-separated 


“Congratulations to SQL Server Magazine for 
its 10th anniversary! I feel privileged to be 
part of this magazine, and І can't believe that 
10 years passed by so quickly. That's what 
happens when you have fun! | thoroughly 
enjoy covering T-SQL challenges and would 
like to thank the magazine's readers for 
sending me your solutions and ideas." 
—lizik Ben-Gan 
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MORE OPTIONS FOR HANDLING ARRAYS 


LISTING 1: Code to Define the fn split 
CLR UDF 


using System; 

using System.Data.SqlTypes; 

using Microsoft.SqlServer.Server; 
using System.Collections; 

using System.Collections.Generic; 


public partial class SplitCLR 


1 


// Struct used in string split functions 
struct row item 
1 

public string item; 

public int pos; 


} 


// Split array of strings and return а table 

// FillRowMethodName = "ArrSplitFillRow" 

[SqlFunction(FillRowMethodName = "ArrSplitFillRow", 

DataAccess - DataAccessKind.None, 

TableDefinition = "pos INT, element МУАКСНАК (2000) "21 

public static IEnumerable fn split(SqlString inpStr, 
SqlString charSeparator) 


1 
string locStr; 
string[] splitStr; 
char[] locSeparator = new char[1]; 
locSeparator[9] = (char)charSeparator.Value[9]; 
if CinpStr.IsNull) 
Шосос ex 8 
else 
locStr = inpStr.Value; 
splitStr = locStr.Split(locSeparator, 
StringSplitOptions.RemoveEmptyEntries) ; 
//\ocStr.Split(charSeparator.ToString() [0]); 
List«row item» SplitString = new List<row_item>() ; 
int i = 1; 
foreach (string s in splitStr) 
{ 
row_item r = new row_item(); 
r.item = s; 
г.ро5 = 1; 
SplitString.Add(r); 
++1; 
+ 
return SplitString; 
} 


public static void ArrSplitFillRowC 
Object obj, out int pos, out string item) 
1 
pos + (Crow item)obj).pos; 
item = ((row item)obj).item; 


LISTING 2: Code to Create the usp 
getorders Procedure Using the fn split 
Function 


IF OBJECT ID('dbo.usp getorders', 'P') IS NOT NULL 
DROP PROC dbo.usp getorders; 

GO 

CREATE PROC dbo.usp_getorders(@arr AS ММАКСНАК (2000) ) 

AS 


SELECT O.0rderID, 0.Огдегбате, O.CustomerID, O.EmployeeID 


/* 89CE9E3A-943A-42F2-AEB6-0C924CB18387 */ 
FROM dbo.Orders AS O 
JOIN dbo.fn_split(@arr, N',') AS A 
ON O.0rderID = A.element; 
GO 


TABLE 1: Cached Plans for Procedure 
Using CLR UDF 


objtype 
Proc 


l6 February 2009 


usecounts sql 


2 CREATE PROC dbo.usp_getorders(@arr AS... 


list of order IDs as input and returns information about 
the requested orders. It does so by joining the result of 
the fn split function with the Orders table. Note that 
if the input string contains multiple occurrences of an 
order ID, the procedure will return multiple occur- 
rences of that order in the output. If you need to 
return unique occurrences in such a case, either add the 
DISTINCT clause to the SELECT list or rewrite the 
query to use the EXISTS or IN predicate. 

Run the following code to test the stored procedure, 
executing it with two different arrays: 


EXEC dbo.usp getorders N'10248,10250,10249' ; 
EXEC dbo.usp getorders 
N'10260,10270,10265,10290' ; 


Then query the syscacheobjects view to analyze plan 
reuse behavior: 


SELECT objtype, usecounts, sql 
FROM sys.syscacheobjects -- in 2000 query master 
.dbo.syscacheobjects 
WHERE SQL LIKE '%89CE9E3A-943A-42F2-AEB6- 
0С924СВ18387%' 
AND sql NOT LIKE '%5у5%'; 


You'll get the output in Table 1, which indicates that 
the plan was reused. 

The CLR implementation of the fn split function 
is several times faster than the T-SQL implementation. 
Like the T-SQL implementation, the CLR implemen- 
tation 15 secure because it doesn't expose the system to 
SQL injection. In addition, the CLR implementation 
allows efficient reuse of execution plans. (For informa- 
tion about enhancements to CLR table-valued UDFs 
in SQL Server 2008, see the web sidebar “Ordered 
Common Language Runtime Table-Valued User- 
Defined Functions,” www.sqlmag.com, InstantDoc ID 
100976.) 


SQL Server 2008 Table-Valued 
Parameters 

SQL Server 2008 introduces support for table types 
and table-valued parameters. A table type is simply a 
way to have a table definition persist in the database 
for later use as the type for a table variable or a table- 
valued parameter. For example, the following code 
creates a table type called OrderIDs: 


IF TYPE_ID('dbo.OrderIDs') IS NOT NULL DROP TYPE 
dbo.OrderIDs; 
CREATE TYPE dbo.OrderIDs AS TABLE 
( 
pos INT NOT NULL PRIMARY KEY, 
orderid INT NOT NULL UNIQUE 
); 
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aximizing OLTP performance 
commonly resembles a game 

of leap-frog wherein technical 
advances allowing for greater 
capacity are quickly superseded 
by demands for increased processing power and 
the need to handle larger, and more complex, 
workloads. This Essential Guide focuses on some of 
the recent technical advances and best practices that 
IT organizations can leverage to stay ahead of the 
curve when it comes to optimizing OLTP capacity. 


OLTP Defined 

Online Transaction Processing, or OLTP, means 
different things to different people. Among 

IT professionals specializing in infrastructure 

and hardware, OLTP is commonly associated 

with scalability, transactional throughput, and 
benchmarks similar to those featured at www.tpc. 
org. For database professionals, this definition is 
commonly extended to focus more on the fact that 
OLTP means the exact opposite of Online Analytical 
Processing (OLAP) applications—meaning that OLTP 
applications are typically much more focused on 
Line-of-Business (LOB) applications and solutions 
than on Business Intelligence (ВІ) or reporting. 


OLTP Architecture and Workloads 

Regardless of definition, OLTP workloads all share 
common characteristics and architectural similarities 
as they facilitate the management of transaction- 
oriented systems dedicated to the entry, storage, 
and processing of data. Accordingly, OLTP systems 
are typically comprised of an RDBMS or storage 
engine and a transaction processing (TP) monitor 
coupled with dedicated hardware and one or more 
host operating systems. 


In larger deployments, each of these constituent 
components is frequently broken out over multiple 
servers (known as scaling out) or over just a few 
extremely powerful servers (scaling up). In either 
case, OLTP solutions in these environments typically 
require massive amounts of hardware—which 

м is why the Price/tpmC value of TPC.org's TPC-C 

benchmarks is such a critical indicator. In smaller 


"^. deployments, core OLTP functionality can be 
handled by a handful of servers or even by a single 
_ server in some cases. 
ry 


What Does OLTP Mean for Me? 

Whether you're striving to set a record that will 
land you in the annals of TPC.org history, or you just 
want to squeeze additional throughput out of a 
critical LOB application, knowledge of key technical 
improvements impacting OLTP performance and 
adherence to best practices is a critical component 
of success. 


Recent OLTP Advances 

A number of recent technical advances can help 
give you the edge in staying ahead of the curve 
when it comes to providing improved capacity for 
your OLTP solutions. 


Hardware Advances 

Recent hardware advances have provided some 
great options for increasing OLTP capacity and 
throughput. Intel's platform of Xeon 7400 series 
processors incorporate a large number of these 
technical advances including: 


* Multi-Core Processors. Featuring between 
four and six cores, Intel's Xeon 7400 series 
multi-core processors enable the addition of 
increased processing power while keeping 
power consumption and temperature in check. 
Multi-core processors are also ideally suited for 
Symmetric Multi-Processing (SMP) applications 
such as SQL Server as cache-coherency between 
multiple cores on the same die enables higher- 
speed communications than exchanges over the 
slower system bus. In other words, when properly 
configured, a single six-core processor can achieve 
higher rates of throughput than a comparable 
system with six distinct processors (which would 
also require more expensive mother boards and 
higher licensing costs). 


Cache Advances and Execution Window 
Improvements. Intel’s Advanced Smart Cache helps 
to significantly reduce the latency involved in 
accessing frequently needed data. Coupled with 
Intel's Wide Dynamic Execution—which enables 33 
percent more instructions to be run in parallel— 
raw throughput on Intel processors benefits 

from significant increases in execution efficiency, 
yielding greater overall throughput. 


е Increased Cache Sizes. Better yet, since Intel Xeon 
7400 series processors feature L3 Cache sizes 


Knowledge of key technical 
improvements impacting OLTP performance 
and adherence to best practices is a 
critical component of success. 


between 8 and 16MB, they're ideally suited for 
the kinds of intense number-crunching needed to 
keep OLTP solutions highly performant. 


Enhanced Processor Architecture. Intel's line 

of Xeon 7400 series processors feature a 45nm 
microarchitecture that enables workload 
improvements of almost 50% (along with 
power-savings of up to 1096) over predecessors. 
Likewise, this architecture boasts support for up 
to 256GB of RAM, and is capable of over 1066 
million transfers per second (MT/s) - making it 
an ideal platform for data-intensive work-loads. 
Proof of this line of processors' suitability for 
OLTP workloads is manifest in recent record- 
breaking TPC-C benchmarks featuring Xeon 7400 
series processors[1]. Equally important to overall 
performance throughput, however, is the fact 
that these results were also achieved with very 
low Price/tpmC results as well[2] - making them 
very viable options for organizations looking to 
increase OLTP capacity. 


RDBMS / SQL Server 

SQL Server 2008 may have followed shortly on 
the heels of SQL Server 2005, but it brings a bevy 
of impressive new features and benefits that are 
ideally suited to increasing and improving OLTP 
performance and throughput. Advances include: 


* Hot-Pluggable CPUs. With SQL Server 2008, 
CPUs can be added physically, logically (via 
hardware partitioning), or virtually in the case 
of virtualized workloads. And, assuming that 
supporting hardware is in place, this functionality 
allows SQL Server to take advantage of newly 
added processors by means of executing simple 
RECONFIGURE statements rather than requiring a 
service restart or system reboot. 


Support for Non-Uniform Memory Access (NUMA). 
To combat increasing problems with memory 
latency stemming from increased clock speeds and 
competition for memory access among greater and 
greater numbers of processors, hardware vendors 
have begun segregating systems into "nodes" of 
"teamed" processors that are tied to their own 
memory (and frequently their own I/O channels) 
and dedicated system buses. This process of dividing 
memory into non-uniform (i.e., non-equally shared) 
blocks is the core concept behind NUMA and makes 
it much easier for processors to more efficiently 
access their own, local, memory. Consequently, 
systems employing NUMA architectures can scale 

to much greater degrees because they avoid 

much of the contention and congestion present 
when memory is uniformly shared and accessed 

by each individual processor. The downside of 

this approach, however, is that NUMA nodes can 
incur additional overhead when communicating 


with "foreign" memory belonging to other nodes. 
By providing native support for NUMA-enabled 
systems, SQL Server 2008 helps ensure that OLTP 
deployments are able to efficiently leverage 
МОМА strengths and balance interactions 
between "local" and "foreign" nodes while 
ensuring the option of increased scalability. 


Resource Governor. SQL Server 2008's Resource 
Governor allows DBAs to create up to 18 distinct 
pools of allocated CPU and Memory resources (I/O 
pooling is not yet available). Workloads matching 
DBA-defined characteristics can then be routed to 
assigned pools to prioritize and throttle requests 
and operations as needed. In this way, the Resource 
Governor allows organizations to effectively impose 
declarative quality of service controls that can help 
maximize the throughput of critical operations. 

For example, it's possible to ensure that ad-hoc 
queries or requests from certain users or machines 
are given lower priority to system resources than 
mission-critical operations. 


Extended Events. A critical component of 
maximizing OLTP throughput comes from gauging 
overall performance, as well as in dependably 
isolating and identifying bottlenecks. Support for 
this has always been available with SQL Server 
Profiler and Window's Performance Monitor. But 
the introduction of SQL Server 2008's extended 
events signals an eventual replacement of previous 
approaches by providing a much more rich and 
robust framework. This framework will more readily 
facilitate the establishment of baselines, improve 
monitoring and troubleshooting, and make it 
easier to assess the impact of changes to schema, 
functionality, and underlying hardware in response 
to changing business needs and requirements. 


Plan Guide Improvements. SQL Server 2008 
increases the scope of Plan Guides (which debuted 
with SQL Server 2005) and makes them much 
easier to configure and manage. With Plan 
Guides, DBAs can target specific performance 
problems—even when they're unable to change 
the underlying code or queries being executed. 
This, in turn, provides an ideal way to tune the 
performance of third-party code being used in 
OLTP environments 


OLTP Best Practices 

Achieving sustainable OLTP throughput and 
performance on a consistent and repeatable basis 
requires adherence to industry-standard best 
practices. Though these best practices are too 
extensive to fully enumerate in this Guide, two 
key areas of focus include essential hardware and 
configuration considerations along with the use of 
methodologies associated with capacity planning, 
performance monitoring, testing, and tuning. 


Essentials 

In terms of hardware and configuration, properly 
addressing the following concerns when using SQL 
Server as part of your OLTP platform is essential: 


* Disk Drives. Disk frequently represents one of the 
biggest bottlenecks to achieving high degrees 
of OLTP throughput, given the fact that it is 
exponentially slower than CPU and Memory. 
Accordingly, SCSI or SAS drives with wide bus 
connectivity facilitating large amounts of I/O 
transfer are essential. The same can be said for 
rotational speeds (15k drives are 50 percent faster 
than 10k drives), larger cache sizes, and lower 
seek times. 


RAID Selection. RAID-5 provides great protection 
with decent performance. It falls short, however, 
when it comes to writes because each logical 
write incurs 4 physical 1/О5 to account for parity 
and striping. Therefore, OLTP environments 
experiencing greater than 5 percent of writes on a 
sustained basis should ensure that RAID-10 is used 
instead. 


Disk Configuration. Spreading data out over 
multiple spindles can also yield increased 
performance by allowing SQL Server to better 
handle asynchronous I/O operations—typically 
to the point of SQL Server being able to take 
advantage of one file group per processor. 
Accordingly, properly distributing data and 
configuring Processor I/O affinity, along with 
ensuring proper disk offset partition alignment, 
are core considerations for adequately configuring 
disk for improved OLTP performance. 


Memory. Wherever possible, try to provide OLTP 
systems with more physical RAM than the amount 
of disk space required to store your database. 
Doing so will let SQL Server largely bypass the 
need to constantly page data back and forth to 
disk for read-only operations. 


Processor and I/O Affinity. Heavy workloads сап 
cause processor cache degradation when multiple 
processors are forced to repeatedly reload 
instruction sets. Therefore, in some cases, limiting 
hardware resources (via Processor and I/O affinity 
as well as MAXDOP) can provide significant 
boosts. SQL Server Books Online provides great 
information on best practices. 


NUMA. If your system supports NUMA, specifically 
mapping TCP/IP connections to distinct nodes can 
provide substantial benefits. See SQL Server Books 
Online for more details. 


Isolation. SQL Server performs admirably under 
any scenario, but is at its best when it has full, 
dedicated, access to underlying hardware 
resources. 


Methodologies 

Industry-standard methodologies for planning, 
monitoring, and tuning your OLTP environment 

go hand in hand with properly configuring and 
architecting an OLTP solution. Yet this is one area 
where many organizations fail to execute—resulting 
in decreased optimization. 


For example, workload characterization and 
capacity planning are essential to properly sizing 
hardware against needs. Yet despite easy access to 
helpful resources (vendor-supplied planning tools, 
online articles, books) organizations commonly 
incur headaches stemming from the failure to 
adequately size their infrastructure. 


Equally important, yet equally neglected, is the 
need to establish baseline metrics of performance 
activity. With baselines established against typical 
workloads, spotting potentially dangerous spikes in 
activity becomes much easier. Baselines also make 
it much easier to assess the impact of newly added 
features or hardware, and can also help highlight 
the effects of data-drift as heavily-used systems 
grow and accumulate data. Baselines also make it 
possible to assess the impact of performance tuning 
and troubleshooting approaches—in terms of any 
side effects they may impose on other aspects of 
overall system performance. 


Conclusion 

With knowledge of recent technical advances and 
best practices gained from this Guide, as well as 
from SQL Server Books Online and other resources, 
you can easily boost the throughput and efficiency 
of your own OLTP solutions. 


FootNotes: 

1. See: http:/Awww.intel.com/performance/server/ 
xeon mp/server table.htm 

2. See: http://www.intel.com/performance/ 
server/xeon mp/summary.htm?iid-products . 
xeon7000--body benchmarks 


Michael K. Campbell is the president of OverAchiever 
Productions, a consultancy dedicated to technical 
evangelism, mentoring, and quality solutions. Michael 
specializes in SQL Server, ASP.NET, IIS, .NET and related 
technologies. He has been a professional developer, web 
master, and a DBA for several well-known companies. He 
enjoys learning, problem-solving, and teaching. Michael 


is an ASPInsider, and has written articles for a variety of 
magazines and web sites including SQL Server Magazine 
and the ASPAlliance.com. He is active on the SQLAdvice. 
com newsgroups and enjoys helping others. Michael 

сап be contacted through any of his sites listed at http:// 
overachiever.net. 
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MORE OPTIONS FOR HANDLING ARRAYS 


TABLE 2: Output of 


As an example for 


Query Against Table using the table type, 
Variable @Т the following code 
pos orderid declares a table vari- 

1 10248 able of the OrderIDs 

type and manipu- 

2 10250 lates the variable 

3 10249 with INSERT and 


SELECT statements: 


DECLARE QT AS dbo.OrderIDs; 

INSERT INTO @T(pos, orderid) VALUES(1, 10248), (2, 
10250), (3, 10249); 

SELECT * FROM GT; 


This code returns the output shown in Table 2. 

The benefit of table types isn't only the ability to use 
them as types for table variables, but more importantly 
the ability to use them as types for input parameters 
of stored procedures and functions. Thus, you can 
pass multiple values as input to your routines instead 
of relying on cumbersome solutions such as passing 
strings with comma-separated lists of values. As an 
example, the code in Listing 3 creates a new version 
of the usp getorders stored procedure that accepts a 
table-valued parameter as input instead of a string with 
a comma-separated list of values. 

Note the use of the READONLY clause, which 
is mandatory in SQL Server 2008. SQL Server 2008 
allows reading from table-valued parameters but not 
writing to them. 

When you need to execute a stored procedure, you 
must declare a variable of the table type, populate it 
with rows, and pass it as input to the stored proce- 
dure. For example, the code in Listing 4 executes the 
usp getorders procedure with two different inputs. 

You can query the syscacheobjects view to observe 
the plan reuse behavior: 


SELECT objtype, usecounts, sql 
FROM sys.syscacheobjects -- in 2000 query master 
.dbo. syscacheobjects 
WHERE SQL LIKE '%84B72B28-8D27-45FC-89BB- 
2A84226AEGE8%' 
AND sql NOT LIKE '%sys%'; 


Table 3 shows the output of this query. The usecounts 
attribute in the table indicates that the plan was used 
twice. 

Internal handling of table-valued parameters is 
similar to handling of table variables. For example, 
SQL Server doesn't maintain distribution statistics 
(histograms) on table-valued parameters, and their 
scope is limited to the local batch. 

SQL Server 2008 client APIs are also enhanced to 
support table-valued parameters. Like the CLR split 
UDF approach, the implementation of stored proce- 
dures using table-valued parameters is secure, and it 
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LISTING 3: Code to Define the 
usp getorders Procedure Using Table- 
Valued Parameters 


IF OBJECT ID('dbo.usp getorders', 'P') IS NOT NULL 
DROP PROC dbo.usp getorders; 

GO 

CREATE PROC dbo.usp_getorders(@T AS dbo.OrderIDs 
READONLY) 

AS 


SELECT O.0rderID, 0.OrderDate, O.CustomerID, O.EmployeeID 


/* 84B72B28-8D27-45FC-89BB-2A84226AEQE8 */ 
FROM Northwind.dbo.Orders AS 0 
JOIN GT AS K 
ON 0.Огдег = K.orderid 
ORDER BY K.pos; 
GO 


LISTING 4: Code to Execute the 
usp getorders Procedure with Two 


Different Inputs 


DECLARE GMyOrderIDs AS dbo.OrderIDs; 

INSERT INTO @MyOrderIDs(pos, orderid) VALUES 
(1, 10248), (2, 10250), (3, 10249); 

EXEC dbo.usp getorders GT = GMyOrderIDs; 

GO. 


DECLARE GMyOrderIDs AS dbo.OrderIDs; 

INSERT INTO @MyOrderIDs(pos, orderid) VALUES(1, 
10260), (2, 10270), (3, 10265), (4, 10290); 

EXEC dbo.usp getorders GT = @MyOrderIDs; 

GO 


TABLE 3: Cached Plans for Proc Using 


Table-Valued Parameter 


objtype 
Proc 2 


usecounts sql 


allows efficient reuse of previously cached execution 
plans. 


Recommendation 

The need to pass an unknown number of values as 
input to a routine is common in T-SQL. You can use 
one of four techniques that I demonstrated to accom- 
plish this task: dynamic SQL, a T-SQL split function, 
a CLR split function, or table-valued parameters. The 
number of options available depends on the version 
of SQL Server you're using. I don’t recommend the 
dynamic SQL approach because it has security and 
performance problems. The T-SQL split function is 
secure and efficient, but it’s complicated. The CLR ver- 
sion of the split function is faster and less complicated 
than the T-SQL version, but it requires a non-T-SQL 
implementation. If you’re running SQL Server 2008, 
I recommend the table-valued parameter solution 
because it’s secure and efficient and it uses T-SQL 
exclusively. For more information about using arrays as 
inputs in SQL Server stored procedures, see SQL Server 
MVP Erland Sommarskog’s research and findings at 


www.sommarskog.se/arrays-in-sql.html. SQU 
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Avoid Common 


SQL SERVER ANALYSIS SERVICES 


Build powerful, flexible cubes without design 
and implementation headaches 


Server Analysis Services 
(SSAS) is the Microsoft cube- 
building engine that DBAs 


and SQL Server developers can use to create multidi- 
mensional data structures. Although SSAS produces 
powerful, flexible cubes, the complexity inherent in 
using SSAS to design dimensions, hierarchies, measure 
groups, and calculations can cause problems. We'll 
explore some of the common mistakes SQL Server 
pros make in the design and implementation of their 
SSAS cubes and learn how to resolve them. 


Dimension Headaches 

SSAS's most troublesome area is dimension design. 
Part of this difficulty stems from the importance 
dimensions play in letting users slice and dice the data, 
coupled with the many properties of attributes and 
hierarchies, attribute relationships, and attribute keys. 

Attributes and hierarchies. SSAS 2008 and SSAS 
2005 let you treat each dimension attribute as a 
separate hierarchy, which enhances analysis but also 
produces slow queries returning vast amounts of data. 
Although some companies simply leave the attributes 
as standalone hierarchies, cube developers should 
build multilevel hierarchies in the dimensions whenever 
possible. 

Natural hierarchies are those in which each level 
logically leads to the next, much as years can be broken 
down into quarters, quarters into months, and months 
into days. When creating hierarchies, you should make 
as many of them as possible natural, although it's 
acceptable to define hierarchies that aren't natural (e.g., 
user or reporting hierarchies). Users expect to be able 
to drill both down and up when working with data, 
and a guided drill path makes cubes more usable by 
simplifying the user experience. 

Additionally, you should hide attributes included 
in multilevel hierarchies to avoid having users query 
against the attributes independently while performing 
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analysis. The problem with treating some attributes 
as independent hierarchies is that users might unwit- 
tingly perform analysis on a low-level attribute, such 
as individual customers. Such an analysis could return 
hundreds of thousands or even millions of members 
and require several minutes to stream the data from 
server to client. Because of this performance impact, 
you should hide the hierarchies for attributes included 
in multilevel hierarchies and hide attributes that are 
treated only as properties of other attributes. The 
attributes are visible but only as part of the hierarchy. 
The simple Customer dimension in Figure 1 has two 
hierarchies, Customers and Demographics, and the 
City attribute has AttributeHierarchyVisible set to 
False, per Microsoft's recommendation to hide attri- 
bute hierarchies included in a multilevel hierarchy. 
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Figure 1 


Customer dimension with two hierarchies 


February 2009 19 


AVOID SSAS PROBLEMS 


Attribute relationships. 
After building hierarchies, 
you should create attri- 
bute relationships. (See 
"Creating Dimensions 
in SSAS, Part 2,” www 
.sqlmag.com, InstantDoc 
ID 98699, for informa- 
tion about creating attri- 
bute relationships.) These 
relationships tell the 
SSAS engine how attri- 
butes relate to each other 
to perform queries and 
build aggregations. For 
example, you can sum the 
days of a month into a 
monthly total, the values 


Figure 2 


Creating attribute 
relationships in BIDS 
2005 


for three months into a 

quarterly total, and so 
forth. Without attribute relationships, however, the 
engine doesn't know that days are related to months 
and months to quarters. Without attribute relation- 
ships, if the user asks for the total for a particular 
quarter, SSAS has to read the individual day records 
and sum them all to get quarterly totals. With attribute 
relationships, SSAS can simply add three monthly 
totals to obtain the quarterly total. 


BIDS 2008 (note that Calendar Year is cut off in the 
diagram), which provides a graphical designer that sig- 
nificantly reduces errors. In both cases, two hierarchies 
exist: one for Year to Quarter to Month to Day, and 
one for Year to Quarter to Week to Day. 

Attribute keys. Attribute keys relate to attribute 
relationships and define what's unique about a par- 
ticular characteristic. Sometimes the keys require more 
than one column from the dimension table, much like 
a primary key in an OLTP table. For example, the 
month column in a time dimension might contain just 
the month numbers (e.g., 1, 2, 3). However, the month 
number, by itself, doesn't say enough about that attri- 
bute to make it unique because every year has a month 
of that number. Therefore, the attribute key must be 
both the year and the month. Neglecting to set the key 
correctly can lead either to a failure during processing 
or to successful processing with unpredictable results, 
depending on whether the attribute relationship is set 
to be rigid or flexible. 


Cube Headaches 
Although common problems occur in dimensions, 
cubes can cause headaches, too, in their design and 
processing. If you avoid the following common 
mistakes, you can make usable cubes and help speed 
processing times. 
Measure groups, for example, contain measures 
that have the same dimensionality 


1& Dimension Structure | [2 Attribute Relationships || Translations |Щ коне 
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and granularity. Multiple measure 
groups with different characteristics 
can exist in one cube. One of the 
most common areas of confusion 
with SSAS 2008 and SSAS 2005 is 
the fact that measure groups default 
to repeating a value for all members 
of an unrelated dimension. 
Forexample, the AdventureWorks 
database includes products sold over 
the Internet and through a reseller 
channel. For Internet sales, Adven- 


Figure 3 


Viewing attribute 
relationships in BIDS 
2008's graphical 
browser 
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Creating proper attribute relationships benefits 
both processing and querying. However, database 
professionals find creating attribute relationships to 
be one of the biggest SSAS challenges, in part because 
of the somewhat confusing manner in which Business 
Intelligence Development Studio (BIDS) 2005 defines 
the relationships. Fortunately, BIDS 2008 includes a 
graphical browser that makes it easy to not only see the 
attribute relationships but also to spot problems such 
as circular references and redundant relationships. 

Figure 2 shows attribute relationships in BIDS 
2005 created by dragging the parent attribute under 
the child attribute, and Figure 3 reveals the same attri- 
bute relationships through the new graphical viewer in 


tureWorks knows the end customer 
and operates without a reseller. For 
reseller sales, AdventureWorks sells directly to the end 
customer and therefore doesn’t use a reseller. Conse- 
quently, if a user looks at reseller sales and tries to view 
the customer, the same value repeats for each customer, 
as you see in Figure 4. This image shows two columns: 
Sales Amount and Sales Amount - Fact Reseller Sales, 
both for 2001. Along the left side is a breakdown of 
the customer dimension by country. The default setting 
is to ignore unrelated dimensions, which can cause a 
value to be repeated for every member of an attribute 
from a dimension unrelated to the measure group. 
There's an easy way to change this default behavior, 
and adjusting it can prevent users from believing that 
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the data they see represents valid values for those 
customers. The solution is a property on the measure 
group called IgnoreUnrelatedDimensions. You can 
find it in BIDS by opening the cube and clicking the 
measure group in the Measures pane. The default value 
for IgnoreUnrelatedDimensions is True, which means 
that the measure group ignores any dimension not 
tied to it by showing the current value for all members 
in the unrelated dimension. Changing IgnoreUnre- 
latedDimensions to False allows the measure group 
to see that the query is asking for a value to be tied 
to a dimension to which the facts aren't related and 
results in the blank values you see in Figure 5, page 22. 
This is a simple fix that can significantly reduce user 
confusion. 


Aggregation Answers 

A primary reason for developing cubes is to create 
precalculated aggregations. Aggregations are summa- 
ries of data at any level higher than the grain, which is 
the lowest level of detail in the fact table. If you record 
sales per customer per product per day, the total sales 
per customer for a day, a month, and a quarter would 
each represent different aggregations (e.g., total sales 
for Customer X by day, total sales for Customer X by 
quarter). The total sales for all customers for a day or 
month by product subcategory or product category 
also represent aggregations. 

Considering the variety of attributes and levels of 
hierarchical information available, one of the most 
straightforward ways to enhance cube performance is 
to precalculate and store these aggregations. However, 
cubes built in BIDS don't include any higher-level 
aggregations by default. Unfortunately, some busi- 
nesses go through the entire deployment process 
without ever creating any aggregations. The Aggrega- 
tion Wizard organizes aggregations based on either a 
percentage of total aggregation, storage size, or simply 
the point at which the designer tells the wizard to stop. 
The wizard's approach is the easiest way to develop 
aggregations; however, the wizard assumes that all 
queries are equally likely. 

One common approach to handling aggregations 
is to let the wizard create a low percentage of aggre- 
gations, such as 20 percent. Then, after the cube 15 
running in production, you can log queries and later 
run the Usage Based Optimization (UBO) wizard. The 
UBO wizard looks at the actual queries and designs 
aggregations that support them, creating aggregations 
that are far more tuned to actual usage patterns. Note 
that for large cubes, the UBO wizard in SSAS 2005 
didn't always provide the best aggregations; the SSAS 
2008 UBO wizard does a much better job. 

Another problem you want to avoid is having too 
many aggregations. Queries can actually suffer as the 
engine searches through a host of aggregations to try 
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to determine which is best at answering a particular 
question. Some DBAs use the Aggregation Wizard and 
set it to 100 percent, which tends to slightly improve 
performance while dramatically increasing storage 
requirements and processing time. Additionally, some 
database pros fashion custom aggregations because the 
wizard, even at 100 percent, doesn't create every pos- 
sible aggregation. SSAS 2005 includes a sample appli- 
cation that provides for the tuning of aggregations, and 
a similar tool is built into BIDS 2008. Some database 
pros erroneously assume that if one aggregation 18 
good, thousands must be better, so they produce every 
possible aggregation. Not only does this require vast 
amounts of storage, but it can also stretch processing 
times into hours or even days. 


Drop Filter Fields Here 


Year * 


$1,225,145.28 $8,065,435.31 


$128,938.46 $8,065,435.31 
$169,137.78 $8,065,435.31 
$215,298.73 $8,065,435.31 
$273,000.07 $8,065,435.31 
$975,456.80 $8,065,435.31 

48,065,435.31 


$2,986,977.12 $8,065,435.31 


Processing Options 
Suppose you need to keep the cube available at all 
times, but it sometimes goes offline for processing. 
To minimize processing time, you can create attribute 
relationships and tune the number of aggregations to 
improve query times while still allowing for processing 
in the allotted time window. 

Commonsense tips for solving the problem include 
reducing the number of attributes in the dimensions 
and partitioning the data. You can also tune specific 


Figure 4 


Measure group 
repeating a value for 
members of an 
unrelated dimension 
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Figure 5 


Results of changing 
IgnoreUnrelated- 
Dimensions to False for 
a measure group 


v Sales Amount —— 
$1,225,145.28 


processing settings. The Microsoft SQL Server 2005 
Analysis Services Performance Guide (which you can 
download at http://www.microsoft.com/sqlserver/2005/ 


en/us/analysis-services.aspx) covers many server set- 


usernames and passwords in them, which works well 
until the password changes. This often happens after 
midnight on a weekend, causing a developer to spend 
hours updating all the information. 

The best practice for connecting to data sources is 
to use Windows authentication, then impersonate using 
a domain account created specifically for accessing the 
source data. This account should have read-only access 
to the data, except when using data-mining models or 
writeback. 


Data-Delivery Snafus 

Perhaps the most common problem with the use of 

SSAS isn't a specific design issue involving the cubes 

but rather the inability to provide the proper tool mix 
needed to deliver data from the 


Change Settings 


These settings apply to the entire processing batch. 


Processing Order — 


© Parallel (All objects will be processed іп а single transaction) 


Maximum parallel tasks: : 
Сеш 2 
4 
Transaction mode 8 
16 
Wrkeback Table Option 4 
WrReback table option: 
Affected Objects 


Processing affected objects wil process all objects that have а dependency on the selected objects. 


cubes to the organization. No 
single tool is right for everyone; 
typical solutions include at least 
a reporting tool (such as SQL 
- Server Reporting Services) and 
an analytics tool (such as Micro- 
soft Excel or Microsoft Pro- 
Clarity Desktop Professional). 
Many solutions also include a 
scorecard tool (such as Micro- 
soft Office PerformancePoint 
Server 2007). Organizations 
pursuing business intelligence 


[^ Process affected objects 


projects should determine how 
to deliver data and to whom it 
should go to before designing 
the relational data warehouse 


Figure 6 


Changing the Maximum 
parallel tasks value to 
improve performance 
of cube processing 
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tings you can tune, such as ThreadPool\Process\ 
MaxThreads and OLAP\Process\BufferRecordLimit. 
You can also examine a simple setting in BIDS and 
SQL Server Management Studio, which is available 
via the Process dialog box. A Change Settings button 
just above the Run button opens the Change Settings 
dialog box that Figure 6 shows. The default Processing 
Order is Parallel, and Maximum parallel tasks is set to 
Let the server decide. Changing this value can result in 
better (or worse) performance. Although a number of 
values populate the list, you can also manually enter a 
value using a trial-and-error approach. 


Data Source Login Hassles 

Developers often create data sources that connect to 
the database with Windows authentication but set the 
impersonation information to a service account. Such 
an account might not have the appropriate permissions 
to access the data, especially when the project is moved 
from development to test to production. Worse, data 
connections are sometimes made with hard-coded 


and cubes. Knowing how you 
deliver data may drive some 
cube design decisions involving perspectives, key per- 
formance indicators, and more. 


Cubing for Keeps 
Гуе seen the problems detailed in this article regu- 
larly in a variety of companies with varying levels 
of experience in creating cubes with SSAS. It’s clear 
that dimensions cause the greatest number of issues— 
failing to create attribute relationships correctly, 
neglecting to hide attributes used in hierarchies, and 
improperly setting attribute keys. Cubes also lead to 
hassles when you relate measure groups and dimen- 
sions, deal with unrelated dimensions, and create 
aggregations. And many IT organizations don’t opti- 
mize settings for processing and query performance 
and don’t provide end users with adequate tools to 
let their enterprises take full advantage of cube data. 
If you follow the recommendations in this article, you 
have a better chance of creating a usable and high- 
performance set of cubes. SQL} 
InstantDoc ID 100872 
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NULLE 


in the 
Data Warehouse 


How does your database represent INULL? 


database is more than a repository for raw 
A data—its meant to hold the truth. Ten 
years ago I made that statement when I 
wrote about NULL in OLTP databases. I commented 
in an earlier article that we scrub, decode, and trans- 
form data warehouse data so it can present a single ver- 
sion of truth to the enterprise. See *Data Warehousing: 
Dimension Basics" October 2007, InstantDoc ID 
96846. However, there are vigorous discussions about 
whether or not NULL, which is tightly aligned with 
truth, should be represented in a data warehouse. 
NULL is a condition of the unknown. For 
instance, you don't know John Smith's marital status 
or eye color, but you do know that he has a marital 
status and an eye color. In your organization's human 
resources database, if you were to enter any other value 
except NULL as an answer to these questions, you d 
be storing untruth. In the database world, NULL 
can have many meanings "Value is not relevant" 
and “value exists but is unknown" are the two most 
common and most easily understood. 


NULL in OLTP and 
Nonrelational Databases 
In an OLTP database it's important to use NULL 
where and when it's relevant, otherwise you're masking 
the truth in data. АП major relational database man- 
agement systems (RDBMSs) today represent NULL 
explicitly, but that doesn't mean that database schemas 
have been properly architected to use NULL. Too 
often, DBAs who learned to build databases on nonre- 
lational platforms used alternate methods to represent 
the unknown condition. In addition, programmers 
who don't grasp the importance of NULL, or who 
don't want to be bothered coding for it, create tables 
using all manner of implicit representation for the 
unknown condition. These tables from development 
end up in production. 

A surprising number of nonrelational databases 
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are still in production today, and few of these support 
NULL explicitly. True legacy systems contain data that 
implies NULL, such as using a value of -1 for integers 
that should have only positive values. Other tricks: 
using a value of zero where the numeric values should 
be non-zero; using a fictitious date such as 99999; using 
variations on the character string unknown, such as 
n/a, na, not relevant, missing, and so forth. 

The existence of nonrelational production data- 
bases makes a difference to the data warehouse DBA 
because legacy and OLTP databases are the source of 
data for the data warehouse. You have to deal with 
these explicit and implicit NULL conditions. But 
first you have to answer the most relevant question, 
"Should I allow NULL in the data warehouse?" 


NULL in the Data Warehouse 

The goal of the data warehouse is to represent a single 
version of the truth for the enterprise. An exception 
to this goal is where you use business intelligence 
(BI) on direct-loaded data in order to ferret out the 
gap between perception and reality, as I discussed in 
“БІ Without the Data Warehouse," September 2008, 
InstantDoc ID 100218. 

Incorporating NULL into the relational data 
warehouse can complicate querying and cause end- 
user confusion. If IT specialists can't grasp the idea 
or importance of NULL, then how can we expect end 
users to understand NULL? We must assume that 
business end users are querying the data warehouse 
for statistical information; how will NULL affect the 
answers they get from the data? If an end user queries 
the warehouse and filters on a nullable value, is it valid 
to leave the entire record out of the analysis? If a value 
15 unknown at the time of measurement, which is a 
plausible condition with slowly-changing dimensions, 
would it be better to omit the record from the analysis, 
or should you include it with some sort of zero or 
"temporarily unknown" condition. How would you 
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NULL IN THE DATA WAREHOUSE 


do that? If a value exists in the source database but the 
extraction, transformation, and loading (ETL) process 
failed to bring it into the data warehouse, is it better 
to treat that value as NULL (the true condition) or 
should you calculate and assign a median or average 
value to it? 

A NULL attribute can cause an entire record to 
be left out of an analysis, which, in a small data set, 
could skew results and give misleading information to 
business decision-makers. Or, the presence of NULL 
when trying to process cubes could cause SQL Server 
Analysis Services (SSAS) to throw an error and stop 
processing. On the other hand, substituting values for 
NULL (e.g., zero, median or average values, fictitious 
dates) can also produce misleading results. You need to 
support BI users by giving them the cleanest data set 
with the clearest inherent meaning. You don't want to 
confuse or encumber end users by embedding implica- 
tions of NULL in the data, such as a -1 instead of a 
positive number, which means that the value is actually 
unknown and that end users should treat records that 
contain -1 differently from the rest of the data set. 
So is there a “best way” to handle NULL in Ше data 
warehouse, a way that satisfies both the truth condition 
and the ease-of-use condition? 


Consider Data Warehouse 
Business Requirements 

Before I make my recommendation, remember, nothing 
15 absolute. Your decisions must be based on the busi- 
ness requirements that the data warehouse was built 
to support. In general, I suggest that you leave cur- 
rency and percentage attributes NULL. A zero dollar 
amount and an unknown dollar amount are very dif- 
ferent, and a zero percent, when incorporated into a 
statistical evaluation, could skew results far more than 
an unknown percentage. Date attributes are best left 
NULL, because it's hard to enforce a fictitious date 
value. In the OLTP source, when the data access of 
end-user applications was restricted, it was relatively 
easy to filter out these fictitious dates. But your BI 
users have the run of the data with their statistical and 
data mining tools. These fictitious dates could have 
an impact on mean and median values. You should 
leave numbers NULL, for reasons similar to those 
for leaving currency, percentage, and date data types 
NULL. Zero is too often a valid value to be used as an 
implicit NULL. Including negative values in a positive 
number data set will confuse BI users who don't know 
that the negative number is meant to be NULL. And 
lastly, I would substitute an empty string or a string 
such as “unknown” for NULL character data types. 
SQL Server 2005 Analysis Services and Microsoft 
Office Excel pivot tables easily deal with empty strings, 
and the presence of an empty string can be even more 
meaningful than a string that reads “missing.” 


When to Do NULL Conversions 
It’s easiest to do these conversions during the data trans- 
formation phase of the ETL process, before you load 
the data into the data warehouse. In the source data, 
if you have data definitions or metadata (code books) 
that spell out the implicit NULL conditions (e.g., -1 
in an otherwise positive number data set or fictitious 
dates like 99999) or if you can extract these implied 
conditions from the data itself, then you can use these 
rules for the transformation logic. Change 99999 dates 
to NULL, for instance. If you do these conversions 
before loading data into the warehouse, you'll save 
time and CPU cycles. As it says in SQL Server 2005 
Books Online, when SSAS processes a dimension, if it 
encounters a NULL it will by default convert character 
NULL to empty strings and numeric NULL to zero—it 
won't throw an error and stop the processing. For more 
information see "Defining the Unknown Member and 
Null Processing Properties" technet.microsoft.com/ 
en-us/library/ms170707(SQL.90).aspx. If the default 
conversion behavior is going to skew results, as in those 
rows where NULL would be converted to zero for the 
calculation, I'd either modify the defaults in SSAS or I'd 
pre-filter the input data set to exclude rows with NULL. 
SSAS won't accept NULL їп either the dimension or 
the fact table when it's cube-building. Conversion on 
the fly adds time and CPU cycle overhead to the task 
of processing the cube. 


Problems with Nullable Foreign 
Keys or Measures 

Dimensions that have nullable non-key columns aren't 
a problem, except for the overhead they could cause 
when you're trying to process a cube. SQL Server won't 
let you create a primary key on any column that's nul- 
lable. Run the code in Listing 1, callouts A-D. Notice 
that when you try to define a primary key on the 
nullable column, colA, SQL Server throws the error 
“Cannot define PRIMARY KEY constraint on nullable 
column in table ‘NULLtest’.” 

The fact table, which is full of foreign keys and 
measures, could be problematic when you're trying 
to process a cube if either a foreign key or a measure 
were nullable. In an ANSI-compliant database, such as 
SQL Server, NULL propagates. If you perform a string 
concatenation of multiple columns, such as the sample 
shown at callout E of Listing 1, you'll see that the row 
that contains a NULL in one of the participating 
columns returns a NULL in the result set. The act of 
concatenating known values to an unknown value can 
only result in an unknown value. 

If you don't have SET ANSI WARNINGS turned 
ON, you'll never see the warning message “Null value is 
eliminated by an aggregate or other SET operation," and 
you'll never realize that the result returned only approxi- 
mates the truth. See the code in callout F. 
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GET CONNECTED to the largest 
INSIDERS event in our industry! 


Providing the vision & intelligence to keep 
you and your company competitive in 
today's market! 


> Train with 75+ Microsoft architects and industry 


experts delivering 150+ in-depth sessions. 


» Visit the cabana sessions in the expo hall. 
Meet and interact with authors and speakers. 


» Gain insight on Cloud Computing: 
stay in the know.... 


» Get answers and solutions to the problems 
you face today. 


> Capitalize on valuable products and services 
from leading companies in the expo hall. 


» Network with industry experts who will give 


advice and instill confidence as the economy 


gets tough. 
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access to sessions in the co-located events. 
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Р 4 


БАТА АССЕ55 


MICROSOFT 

The Entity Framework provides new ways to think 
about data access and new programming patterns 
that will help your applications be a success. This 
session will give advice on how to deal with some 
of the most common problems we find developers 
struggling with when they use the Entity 
Framework including building Web services, 
adding validation to your entities and splitting 
large models up into smaller ones. Along the way 
we may touch upon some additional interesting 
points like customizing code generation and per- 
formance tuning. 


MICROSOFT 

Advances in cheap processors, memory, and con- 
nectivity have paved the way for large scale dis- 
tributed enterprise applications, Web applications 


and services. Distributed main memory caching 
enables developers to meet the extreme scale, 
throughput, latency and availability requirements 
of these applications. In this session, you will learn 
how Microsoft Project "Velocity" will enable devel- 
opers to build these applications. You will also 
learn how we provide query capabilities like LINQ 
support, indexing, concurrency control, and data 
consistency. 


MICROSOFT 

Applications are now being developed using a 
combination of custom application code and 
online data-centric services. In this session, we 
will examine how to use ADO.NET Data Services to 
build rich applications which access data services 
both on-premises (е.0., ADO.NET Data Services 
Framework over on-premises SQL Server) and in 
the cloud (e.g, SQL Server Data Services and 
Windows Azure Table Storage). Learn how you can 
leverage existing know-how related to LINQ 
(Language Integrated Query), data access API, and 
more when building applications using online data. 


CHECK WEBSITE AS WE CONTINUE TO ADD MORE SESSIONS, SPEAKERS AND MAKE UPDATES 


% 


GREAT EVENTS AFTER REGULAR TECHNICAL SESSIONS: 


WWW.DEVCONNECTIONS.COM 


AFTER A DAY OF IN-DEPTH SESSIONS, JOIN US AT THE CONNECTIONS PARTY FOR FOOD, MUSIC AND GAMES 


Prizes and drawings in the expo hall 
Quiz fun with Carl and Richard from .NET Rocks! 


Evening events 


Enjoy the "rush" during conference 
t-shirt giveaway 


You could win a cruise for two to the Caribbean 
along with other cool giveaways 


Meet the speakers at parties or at cabana sessions 
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& PRACTICES 


AAR301: DEPENDENCY INJECTION IN 
ASP.NET: THE BEST WAY TO LOW COUPLING 
DINO ESPOSITO 

Low coupling has always been a major achieve- 
ment for application designers. Low coupling is a 
system quality that descends from correct applica- 
tion of some good 00D principles. One of these 
principles is the "Dependency Inversion Principle" 
according to which whenever you identify in a 
class, or even in a method, a dependency, you save 
that to an interface and resolve that dependency 
using an external component. Dependency injec- 
tion is an application of principle that benefits 
from a growing number of ad hoc tools such as 
Castle Windsor and Microsoft Unity. The session 
will first discuss the theory of dependency inver- 
sion and then applies it to the design of ASP.NET 
pages and Silverlight applications. 


CLOUD COMPUTING 


ACL101: BUILDING ASP.NET APPLICATIONS 
IN THE MICROSOFT CLOUD 

STEVEN SMITH 

Looking to learn more about the capabilities of 
Microsoft's Cloud Computing offering? This session 
will provide you with an overview of the Microsoft 
Cloud Computing architecture and will demon- 
strate how to build an ASP.NET application on top 
of this architecture. 


CLIENT SIDE AND AJAX 


ACS101: WHAT ASP.NET DEVELOPERS 
SHOULD KNOW ABOUT JAVASCRIPT 
SCOTT ALLEN 

Modern JavaScript frameworks leverage features 
of the JavaScript language that are not familiar to 
developers who spend most of their time in C# or 
Visual Basic. In this session, we'll look at the 
JavaScript language and how to use prototypical 
inheritance, constructor functions, and other fea- 
tures with an eye towards writing better 
JavaScript code, and understanding contemporary 
JavaScript libraries. 


ACS201: CREATING RESPONSIVE USER 
INTERFACES WITH ASP.NET AJAX 
RACHEL APPEL 

Internet savvy users have come to expect a high 
level of interaction, responsiveness and robustness 
when dealing with Web applications, and in this ses- 
sion we will use ASP.NET AJAX to create user inter- 
face enhancements for Web pages that behave 
more like traditional Windows applications. We'll 


take a look at replacing the UpdatePanel control 
with code from the ASP.NET AJAX Script Libraries as 
well as capturing data returned in JSON format 
from script callable Web services to optimize our 
Web applications. We'll also look at managing and 
compressing JavaScript files to lighten the load on 
the network as well as many other tips and tricks to 
bring our website's performance standards to the 
same level that the users demand. 


ACS301: AJAX 4.0: RICH INTERNET 
APPLICATIONS COME OF AGE 

DON KIELY 

The ASP.NET team at Microsoft just never sits still. 
They are enhancing the AJAX features of ASP.NET 
with great new stuff like client-side template ren- 
dering, declarative instantiation of behaviors and 
controls, a DataView control, markup extensions, 
and new bindings. Everything is in flux, but there 
are few parts of ASP.NET as exciting as what is com- 
ing down the road. During this session we'll explore 
these new features as implemented in the current 
release and see how you can make your Web appli- 
cations an even better experience for users. 
Microsoft's plans for AJAX will blow your mind! 


ACS202: AJAX ALTERNATIVES: USING 
JQUERY WITH ASP.NET 

RICK STRAHL 

jQuery is a compact and powerful JavaScript 
library that is quickly becoming one of the most 
popular client-side libraries. jQuery's appeal lies in 
its compact implementation and flexible and ele- 
gant use of selectors to pick up document ele- 
ments that can then be manipulated using jQuery's 
flexible set of useful functions in a browser inde- 
pendent way. From AJAX functionality, to easy DOM 
manipulation, to simple effects, this compact 
library provides many ways to make client script- 
ing much easier. Additionally, a vast community of 
add-in authors have added hundreds of extremely 
useful and easy-to-use plug-ins that provide many 
common useful features to common client-side 
tasks. In this session, l'Il demonstrate a host of fea- 
tures of jQuery as well as demonstrate how you 
can integrate this powerful client-side library with 
ASP.NET on the server. We'll look at how to provide 
JSON services through ASP.NET in a couple of ways 
as well as look into ways that you can integrate 
existing components and plug-ins as ASP.NET serv- 
er controls with a little bit of work. 


ACS302: EXTENDING JQUERY: CREATING 
PLUG-INS AND ASP.NET CONTROLS WITH 
JQUERY 

RICK STRAHL 

One of the great strengths of the jQuery JavaScript 
framework is its simple yet powerful extensibility 
model. Creating a plug-in can provide sophisticat- 


ed reusable functionality quickly and easily. In this 
session, we'll look at how to create jQuery plug-ins 
and review some common patterns that are used 
in the extensibility process. We'll also look at how 
you can leverage jQuery on the server by creating 
ASP.NET controls that integrate with jQuery's core 
library or third-party or your own jQuery plug-ins. 
Combining ASP.NET controls with jQuery gives you 
server-side configurability and the ability to wrap 
resources into self-contained components while 
still providing the client-side usability and power 
of jQuery. 


ACS303: CSS DEEP DIVE 

DAVE SUSSMAN 

With IE8 being CSS 2 compliant, now is the time to 
start investing in standards-based websites. 
Simply designed sites, using semantic markup and 
CSS, can be produced with minimal effort, reducing 
development time and easing maintenance. In this 
session, we'll look at some of the more advanced 
features of CSS, examining a variety of site layouts, 
data entry and display solutions, and detail any 
cross-browser issues. We'll also examine the issues 
in using ASP.NET Server Controls, CSS Adapters, 
and how ASP.NET 4 fits into the CSS landscape. 


ACS304: AJAX BEST PRACTICES 
CHRISTIAN WENZ 

AJAX took the web world by storm in 2005, but 
after the buzz, reality settled in. Many modern Web 
applications today rely on JavaScript, but very 
often, the many advantages of the technology also 
come with risks and downsides. For instance, many 
AJAX applications unknowingly disable the 
back/forward navigation buttons of Web browsers, 
do not support bookmarks, get unpredictable with 
high network latency, can open up memory leaks in 
some browsers, degrade badly when JavaScript is 
disabled, and more. This session presents best 
practices and patterns to take care of the afore- 
mentioned issues and also discusses where 
ASP.NET and ASP.NET AJAX already come with the 
required functionality and where extra code or 
tools is required. 


DATA AND XML 


ADX301: ADVANCED LINQ QUERIES AND 
OPTIMIZATIONS 

SCOTT ALLEN 

Correlated sub queries, join strategies, and other 
advanced topics will be the focus in this session on 
writing advanced LINQ queries against objects, XML, 
and relational data. We will also explore some of the 
lesser-known LINQ operators that we can use in com- 
mon development scenarios, and provide some prac- 
tical demonstrations of optimizing LINQ queries. 


March 22-25, 2009 | Orlando, Florida | 5 


MICROSO 


ASP.NET 


CONNECTIONS 


| | ASP.NET SESSIONS 


ADX101: AN INTRODUCTION TO ASP.NET 
DYNAMIC DATA 

RACHEL APPEL 

f you are tired of the same old ASP.NET webforms, 
GridViews, and ADO.NET data access code that 
make up your current applications, then you'll 
want to take a closer look at ASP.NET Dynamic 
Data. ASP.NET Dynamic Data is Microsoft's new 
technology that provides a template infrastructure 
for your application, page and fields based on your 
applications data model. In this session, you'll 
earn concepts and use of application templates to 
create ASP.NET dynamic data web application. We'll 
then create customizations at the application and 
page levels showing how easy website mainte- 
nance is when using ASP.NET Dynamic Data. We'll 
also cover field level customizations by supplying 
data display formats, custom field types, and data 
validation based on the application's data model. 


ADX201: COMING UP TO SPEED WITH LINQ 
PAUL LITWIN 

LINQ (Language INntegrated Query) is one of the 
new features provided with Microsoft's Visual Studio 
2008 and .NET 3.5 that lets you write strongly-typed 
queries right in your C# or VB code. In this session, 
Paul Litwin will introduce LINQ and the language 
additions to C# and VB that make LINQ possible. Paul 
will demonstrate a number of examples of using 
LINQ against collections as well using LINQ to SQL 
against SQL Server objects. Finally, Paul will opine 
on where LINQ fits in the Microsoft “Data” universe 
and how it stacks up against good old ADO.NET. 


ADX202: CHOOSING THE RIGHT DATA 
ACCESS TECHNOLOGY 

MICHELE LEROUX BUSTAMANTE 
Thanks to recent innovations from Microsoft includ- 
ing LINQ, the Entity Framework and ADO.NET Data 
Services, choosing a technology for data access 
architecture has become a subject for debate. 
Among other things developers must balance pro- 
ductivity, maintainability, elegance and perform- 
ance. Some common questions include: Are data 
readers and data sets still useful? How should | 
choose between LINQ and Entity Framework mod- 
els? Should | design custom entities or use types 
that follow the database schema? Should | use 
ADO.NET Data Services to expose my data model or 
control access via WCF business services? This ses- 
sion will look at data access architecture for each 
of these technologies, illustrate common practices 
when employing each, discuss pros and cons, and 
help you better understand how to choose the right 
technology for your scenario. 
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AGN201: TECHNOLOGY TOOLBOX: 
BUILDING A WEB APPLICATION WITH 
ASP.NET 3.5'S NEW FEATURES 

RACHEL APPEL 

Take a whirlwind tour of all the new features that 
ASP.NET and Visual Studio have to offer. We'll build 
a sample Web application demonstrating the uses 
of the latest cutting-edge technologies: SQL Server 
2008, Visual Studio 2008, ASP.NET Dynamic Data, 
MVC & URL Routing, Entity Framework, ASP.NET 
AJAX Extensions, and the Silverlight 2.0 controls. In 
this sample application, we'll build a time tracking 
application that handles basic entries that an 
employee would create to track their hours worked 
for their company. We will access pre-created data- 
base objects via the Entity Framework libraries and 
perform typical CRUD operation on those objects. 


AGN302: ASP.NET INTERNALS 

ROBERT HOWARD 

This session is a deep dive into the inner-workings of 
ASPNET. In it you'll learn exactly how ASP.NET com- 
municates with the outside world, such as with IIS. 
The session will also peel open ASP.NET's 
HttpRuntime for a deeper look at the internals of the 
request/response processing architecture. Then the 
session will wrap up with a discussion of the ASP.NET 
Page and how it is parsed and compiled. If you want 
to learn how to write better ASP.NET applications, 
knowing exactly how ASP.NET works is critical. 


AGN202: PRAGMATIC ASP.NET TIPS, 
TRICKS (AND TOOLS) PART 1 

STEVEN SMITH 

Every experienced ASP.NET developer has picked up 
a few cool tricks or useful tools that they put to use 
on every new project after they've learned them. 
This session draws upon the experience of many suc- 
cessful ASP.NET developers and distills this knowl- 
edge into a collection of tips and tricks you can start 
using in your work today. Some of the topics covered 
in this session include error handling, tracing, 
caching, base page classes, site layout and architec- 
ture, and data access best practices. You'll learn 
about highly reusable Http Modules and Handlers 
and a few code routines you may want to add to your 
personal library. Stick around for part 2 if you're 
interested in learning about a wide variety of (usual- 
ly free) tools available to aid ASP.NET developers. 


AGN203: PRAGMATIC ASP.NET (TIPS, 
TRICKS) AND TOOLS, PART 2 

STEVEN SMITH 

Every experienced ASP.NET developer has picked up 
a few cool tricks or useful tools that they put to use 
on every new project after they've learned them. 


This session will quickly demonstrate a wide variety 
of useful (and usually free) tools, libraries, and con- 
trols. If you learn about just one new tool that saves 
you a few hours, your time will have been well spent. 


AGN204: CREDIT CARD PROCESSING FOR 
WEB APPLICATIONS 

RICK STRAHL 

Credit card processing is key to ecommerce 
applications, but the process of getting hooked 
up for service is everything but straight forward. 
From merchant accounts to processors, to gate- 
way providers, to a variety of SDKs and external 
Web interfaces, this session provides an 
overview of choices available and demonstrates 
how to integrate the solutions into ASP.NET Web 
applications. We'll look at ап ASP.NET sample 
application that interchangeably works with var- 
ious merchant services through a generic credit 
card processing provider interface that covers 
the following gateways: Authorize.net, 
PayFlowPro, LinkPoint and PayPal Payment Pro. 
We'll also cover how to integrate PayPal's classic 
Web interface which is one of the quickest ways 
to process payments online. 


MVC FRAMEWORK 


AMV201: TO MVC OR NOT TO MVC, THAT IS 
THE QUESTION 

DAVE SUSSMAN 

The ASP.NET Model View Controller framework has 
definite goals: Cleaner UI, cleaner abstraction, sep- 
aration of concerns and improved testing. All are 
great reasons to use MVC, but it's a very different 
way of building websites to the traditional Web 
Form model. In this session, we'll examine both 
MVC and Web Forms, contrasting the two and 
examining the reasons why you'd want to pick one 
over the other. We'll also look at some typical cat- 
egories of sites, seeing which platform would be 
more suitable, whether a mix of the two is sensible, 
and what options there are for migrating between 
the two. 


AMV202: TEST-DRIVEN DEVELOPMENT 
WITH ASP.NET MVC 

STEPHEN WALTHER 

By taking advantage of test-driven development, 
you can build applications that are resilient to 
change. Applications built using test-driven devel- 
opment are easier to maintain over time and mod- 
ify in the future. In this session, Stephen Walther 
demonstrates how you can build ASP.NET MVC 
applications by taking advantage of test-driven 
development. He shows how you can build unit 
tests for database access code, validation logic, 
and different types of MVC controller actions. 


АМ\203: CREATING AN ASP.NET MVC 
DATAGRID HELPER 

STEPHEN WALTHER 

In this session, Stephen Walther demonstrates how 
you can extend the ASP.NET MVC Framework with 
custom HTML Helpers. In particular, you learn how 
to build a custom HTML Helper that displays a set 
of database records in an HTML table. You also 
learn how to extend the HTML Helper so that it sup- 
ports paging and sorting database records. 


AMV204: TESTING ASP.NET MVC 
APPLICATIONS 

JAMES MCCAFFREY 

ASP.NET Web applications built with Microsoft's 
new MVC framework require fresh approaches to 
testing. In this presentation you will learn princi- 
ples and specific techniques for quick and effi- 
cient testing of MVC based applications. Topics 
covered include: how and why testing an MVC- 
based application is different from a testing nor- 
mal ASP.NET application; creating and using unit 
testing and test-driven development on MVC 
Controller components; and writing and executing 
HTTP request-response test automation for MVC 
applications. You will leave this presentation with 
a solid understanding of the techniques available 
to you to test ASP.NET Web applications built using 
the MVC framework, when these techniques are 
appropriate to use, and when alternate techniques 
are preferable. 


PERFORMANCE 


APF201: PERFORMANCE ISN'T OPTIONAL 
-MAKING WEB SERVICES WORK 
RICHARD CAMPBELL 

Often the motivation for bringing Web services into 
the enterprise is not performance-its about inter- 
operability. But performance is NOT optional; with- 
out performance, interoperability becomes an 
exercise in frustration. This session digs into the 
strategies that an architect can employ in the 
design of Web services so that performance is a 
feature of Web services, rather than an obstacle. 


APF301: FROM ONE WEB SERVER TO TWO: 
MAKING THE LEAP 

RICHARD CAMPBELL 

Every Web application starts out on a single Web 
server. And while we've been told over and over 
again that you can always move to multiple Web 
servers, it's not as simple as that! This session 
digs into the details of what it takes to make that 
leap-all the changes needed to let your applica- 
tion function properly with more than one server. 
You'll learn about replicating your Web application 
between two servers and how to keep the content 
in sync. The techniques and challenges of load 


balancing are explored. And we'll explore the crit- 
ical challenge of moving to multiple servers-get- 
ting rid of affinity. There's more affinity than just 
the session object, but that is a key starting point. 
Moving to multiple servers isn't easy, but this ses- 
sion will give you the check list of what to do to be 
successful. 


REPORTING 


ARP201: DESIGNING REPORTS WITH SQL 
SERVER 2008 REPORTING SERVICES 
PAUL LITWIN 

Microsoft has overhauled SQL Server Reporting 
Services for the 2008 release of SQL Server. Gone 
are the separate table and matrix regions, 
replaced by the Tablix region. Much has been 
improved, including visualization and the export- 
ing report results to CSV, Excel, and now Word. 
Come to this session to hear all about designing 
reports with the latest and greatest version of 
Reporting Services. 


ARP202: PROGRAMMING SQL SERVER 
2008 REPORTING SERVICES 

PAUL LITWIN 

In this session, you'll learn how to programmati- 
cally manipulate SQL Server 2005 and 2008 
Reporting Services (SSRS) and integrate SSRS into 
your ASP.NET applications by employing URL 
Access, Report Viewer controls, and the Reporting 
Services Web Services. A major issue with SSRS is 
that you can normally only display reports using 
Internet Explorer, but in this session you'll discov- 
er how to integrate SSRS into your applications 
using any modern browser, including Firefox, 
Netscape, and Safari. Finally, you'll learn how to 
extend reporting services by calling custom .NET 
assemblies from your SSRS reports. 


SECURITY 


А5С401: BETTER PARANOID THAN 
OFFLINE: WEB APPLICATION SECURITY IN 
THE AJAX AGE 

CHRISTIAN WENZ 

The 101 of Web Application Security should be 
mandatory knowledge for every Web developer 
since 2001, but thanks to AJAX the situation seems 
to get worse. Developers with little Web back- 
ground write careless code, thanks to mighty 
frameworks, and even experienced Web gurus 
often just do not take security issues into account. 
Too tempting are the possibilities of AJAX-enabled 
websites, that potential attacks are not properly 
taken care of. The good news is that most common 
attacks still work with AJAX websites, as do the 
appropriate countermeasures. However there are 


also new attacks that are specifically targeted to 
AJAX-y sites, and old attacks with a new twist. This 
session shows various attacks including Cross Site 
Scripting (XSS), Cross Site Request Forgery (CSRF), 
SQL injection, and more; exploits inspired by real- 
life events; and of course countermeasures. We will 
also survey where ASP.NET and ASP.NET AJAX have 
built-in safeguards. 


SILVERLIGHT 


ASL101: DATA BINDING IN SILVERLIGHT 
SCOTT ALLEN 

Building  line-of-business applications іп 
Silverlight typically requires us to present the 
user with data. Fortunately, Silverlight includes a 
useful set of data binding features. In this session, 
we'll look at how to use data contexts, data tem- 
plates, and styles to put information into the dis- 
play. We'll also look at some of the controls, like 
the DataGrid, which are built specifically for data 
binding scenarios. 


ASL102: GETTING STARTED WITH 
SILVERLIGHT 2 

DAN WAHLIN 

New to Silverlight 2 but want to get started? Jump 
start the learning process and break down the 
learning curve with this session by Silverlight 
expert Dan Wahlin (author of Professional 
Silverlight 2 for ASP.NET Developers). Learn key 
concepts used to build Silverlight 2 applications 
such as how to create Silverlight 2 projects in Visual 
Studio 2008, XAML fundamentals, using built-in 
controls and important data access techniques. 


ASL201: BUILDING BUSINESS 
APPLICATIONS WITH SILVERLIGHT 2.0 
MARKUS EGGER 

Silverlight is a great web development environ- 
ment. While version 1.0 was aimed at graphics and 
media, version 2.0 is also great for business appli- 
cation development, allowing developers to com- 
bine the advantages of browser-based applications 
(easy of deployment, reach, platform independ- 
ence..) with the rich environment typically 
reserved for Windows applications. This session 
shows how to create real-life business applications 
including everything, from the Silverlight front end 
all the way to accessing information and other 
applications tiers on the Web server and data 
stored in databases. 


ASL202: SILVERLIGHT AND THE HTML 
BRIDGE (OVER TROUBLED SCRIPT) 

DINO ESPOSITO 

There's always a HTML page around any Silverlight 
plug-in, even when you can't see it because the 
Silverlight application is configured to run in full 
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screen mode. But there's more; the content hosted 
by the Silverlight plug-in is not isolated from the 
surrounding page either. Silverlight 2, in fact, 
comes with a browser interoperability layer that 
allows managed code to access the document 
object model of the underlying page and to regis- 
ter managed handlers for page-level events. At the 
same time, any JavaScript code running within the 
page can gain access to the XAML content of the 
plug-in and even make some modifications. Finally, 
JavaScript code running within the page can also 
invoke managed functions as long as these func- 
tions are exposed properly. This session revolves 
around the browser interoperability layer of 
Silverlight 2 and the ways you can take advantage 
of it in your applications, including to favor inter- 
action between two plug-ins on the same page. 


ASL301: SILVERLIGHT AND WPF: 
ENABLING CODE SHARING AND REUSE 
DINO ESPOSITO 

In Silverlight 2, you use XAML and Windows 
Presentation Foundation (WPF) to design and ren- 
der the user interface. In doing so, you take advan- 
tage of a more powerful markup language than 
HTML to deliver an application front-end. At the 
same time, you leverage the built-in core CLR to 
process managed code within the browser. As a 
result, there's a strong likeness between a Web- 
based Silverlight 2 and a desktop WPF application. 
Enabling good and easy code reuse between the 
two platforms is a precise goal of Microsoft. In this 
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session, l'Il examine the state of the art and dis- 
cuss a few patterns to make sharing XAML markup 
and WPF code as easy as possible. 


ASL203: BUILDING RIAS WITH AJAX, 
SILVERLIGHT AND WCF 

MICHELE LEROUX BUSTAMANTE 

Rich Internet Applications (RIAs) rely on tools such 
as AJAX and Silverlight to present data to users in 
an interesting and interactive manner. Applications 
built with .NET 3.0 and beyond typically rely on WCF 
to expose data and business functionality. Can the 
two worlds play together nicely? This session will 
explore how to consume WCF services from both 
AJAX and Silverlight clients; show the client code 
required to achieve this, and features that stream- 
line the process; show optimal configurations for 
WCF to support these client technologies; and dis- 
cuss possibilities and limitations for securing com- 
munications between AJAX and Silverlight clients 
and WCF services. 


ASL204: INTEGRATING SILVERLIGHT INTO 
ASP.NET APPLICATIONS 

DAVE SUSSMAN 

If you were building a rich application platform 
that worked over HTML, would you pick technolo- 
gies that are 10 years old, technologies that force 
us to work around inherent problems in their 
design? Of course not, so why are you still building 
applications using HTML and JavaScript? 
Silverlight 2, with its suite of controls, networking 


support and great design support, becomes a com- 
pelling rich interactive application platform. While 
not suitable everywhere, Silverlight can be used to 
enhance existing sites, so in this session we'll look 
at the integration of Silverlight into existing appli- 
cations, the places where it's sensible to break out 
into a rich programming model, perhaps replacing 
custom controls or AJAX functionality with 
Silverlight content. 


ASL205: LEVERAGE SILVERLIGHT 2 
ANIMATION FEATURES 

DAN WAHLIN 

Silverlight 2 provides excellent animation features 
that can be used to add eye-catching effects to an 
application. In this session, Dan Wahlin (author of 
Professional Silverlight 2 for ASP.NET Developers) 
will discuss how to take advantage of Silverlight's 
animation capabilities, create both static and 
dynamic animations, and examine tweaking frame- 
works that can be used to add great effects to your 
Silverlight applications with minimal code. 
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MICROSOFT DAY - VISUAL STUDIO 
TEAM SYSTEM SESSIONS 


DISPELLING THE MYTHS: VISUAL STUDIO 
PROFESSIONAL VS. VISUAL STUDIO 

TEAM SYSTEM 

MICROSOFT 

Ever wondered what the difference is between Visual 
Studio Professional and Visual Studio Team System? 
Trying to figure out when you need one or the other? 
Are there simply too many choices to navigate? In 
this session, you will learn the key differences 
between the two products...well, six products actual- 
ly--see why you need to go to this session? We will 
cover everything from the basic differences between 
Visual Studio Professional and Visual Studio Team 
System to what Team Foundation Server can provide 
you. You will learn about the various Editions of 
Visual Studio Team System and when to choose one 
of them or Visual Studio Professional. 


LOOKING GOOD WITH TEAM FOUNDATION 
SERVER VERSION CONTROL 

MICROSOFT 

Whether you're writing СЕ for Windows or Java for 
Linux, any developer can use Microsoft's Team 
Foundation Server (TFS) as a world-class source 
code control repository. In this session, develop- 
ers move beyond the checlcin dialog and go deep 
into TFS version control functionality. Among the 
many individual productivity tips you'll learn are: 
using shelve sets effectively for code review and 
delivering fixes among your development col- 
leagues, working with advanced tools to inspect 
and validate source code changes, and crafting 
your own tools with the TFS object models. 


BETTER TOGETHER: GETTING THE MOST 
OUT OF VISUAL STUDIO TEAM SYSTEM 2008 
DEVELOPMENT AND DATABASE EDITIONS 
MICROSOFT 

Application development in today's data-rich world 
requires robust tools that aid productivity and 
ensure quality. Nearly all modern application devel- 
opment requires bringing together application logic 
and information stored in one or more databases. In 
this session, you will see how the pairing of Visual 
Studio Team System 2008 Development Edition and 
Database Edition can make you more productive and 
your code more robust. Through demonstrations you 
will see how to manage database changes and test- 
ing to ensure quality, and how that carries over into 
the application logic you write with tools to ensure 
accuracy and efficiency of your code. 


CHECK WEBSITE AS WE CONTINUE TO 
ADD MORE SESSIONS, SPEAKERS 
AND MAKE UPDATES 


WWW.DEVCONNECTIONS.COM 


BUILD IT RIGHT: TESTING AND 
VALIDATION WITH VISUAL STUDIO TEAM 
SYSTEM 2008 TEST EDITION 
MICROSOFT 

Quality is paramount. In any software development 
project, ensuring quality is one of the top priorities 
of everyone involved. Quality comes from skilled 
masters of their craft working diligently to ensure 
the best possible workmanship. But let's face it, 
their output can't be trusted without some level of 
validation. Visual Studio Team System 2008 Test 
Edition provides a set of tools designed to help you 
validate the correctness of your software develop- 
ment projects (even if you're the one who wrote 
the code). From Web tests to load test, and test 
automation to defect tracking, the Test Edition will 
help you ensure the quality of your software from 
the time you write the first line of code until the 
time it ships. 


MICROSOFT DAY - 
ARCHITECTURE/AGILE SESSIONS 


EXPLORING ARCHITECTURES AND 
MODELING WITH VISUAL STUDIO TEAM 
SYSTEM 2010 ARCHITECTURE 
MICROSOFT 

How can you more quickly understand and evolve 
an application that you've never seen? How do you 
manipulate the existing architecture in light of new 
business requirements? How do you validate the 
logical architecture against existing patterns and 
design rules? Visual Studio Team System 2010 
Architecture integrates logical modeling using 
UML-compliant diagrams and physical modeling 
using DSL diagrams with first class support for 
.NET. Armed with the ability to see into the sys- 
tem's code to quickly understand the context of 
necessary change, developers and architects can 
quickly identify the impact of a change. The ability 
to overlay metrics generated from other applica- 
tion lifecycle activities such as code analysis, pro- 
filing, testing etc., into these model diagrams will 
make these artifacts first class citizens that are 
valued by both architects and developers. 


AGILE DEVELOPMENT WITH VISUAL 
STUDIO TEAM SYSTEM 

MICROSOFT 

Have you heard the phrase "Agile Development" 
and wondered what it is? Are you interested in 
learning how to use Visual Studio Team System to 
support your agile interests? In this session you 
will learn how to perform common "agile" tasks 
using Visual Studio Team System 2008, including 
unit testing, continuous integration, and sprint 
planning. You will also get an early look at the 
improvements for agile development coming in 
Visual Studio Team System 2010. 


AGILE PLANNING WITH VISUAL STUDIO 
TEAM SYSTEM 2010 

MICROSOFT 

Agile methodologies, such as Extreme Programming 
(XP) and Scrum, have taken hold in mainstream 
application development. What was once only for the 
elite has now become common practice. In Visual 
Studio Team System 2010 there are a number of 
advancements to support agile planning and devel- 
opment, including new agile planning workbooks, 
changes to work item tracking, better integration 
with Excel and Project, and new reporting capabili- 
ties that make status reporting, retrospectives and 
planning easier. In this session you will see how you 
will be able to leverage these advancements in your 
own application planning efforts. 


END OF MICROSOFT DAY 
SESSIONS 


.NET ROCKS! LIVE 

CARL FRANKLIN AND 

RICHARD CAMPBELL 

Come watch Carl Franklin and Richard Campbell 
interview some of the movers and shakers in the 
.NET world. Don't miss this live recording of .NET 
Rocks! For more episodes online go to www.dot- 
netrocks.com. Check the Web site closer to show 
time to find out who the guest(s) will be. 


BUILDING DATA VISUALIZATION 
APPLICATIONS WITH THE WINDOWS 
PRESENTATION FOUNDATION (WPF) 

TIM HUCKABY 

This session will be heavily demo-focused to accen- 
tuate how the power of the Windows Presentation 
Foundation (WPF) can be used to visualize data. WPF 
is the next-generation presentation sub-system for 
Windows. It provides developers and designers with 
a unified programming model for building rich 
Windows smart client user experiences that incorpo- 
rate Ul, media, and documents. WPF uses vector- 
based graphics rendering, which results in better 
graphics and presentation for an application. WPF 
also has other features such as layout, styling, and 
data binding, which, when you mix with interactivity, 
enables scenarios such as interactive data visualiza- 
tion. When you put all this together, you have a uni- 
fied API for various presentation components, such 
as 2D and 3D documents and declarative program- 
ming through XAML, which is a powerful platform for 
data visualization that can be used to really "light- 
up" your enterprise applications. 


INTEGRATING WPF & WCF INTO YOUR 
OFFICE BUSINESS APPLICATIONS 

TIM HUCKABY 

This session will highlight many of the ways that the 
Windows Presentation Foundation (WPF) and the 
Windows Communications Foundation (WCF) can be 
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leveraged in applications built with Visual Studio 
Tools for the Office System (VSTO). Visual Studio 2008 
introduced an array of new features aimed at a wide 
range of Office solution types. With Visual Studio 
2008, you can build solutions that incorporate the 
native capabilities of the Office client applications 
(like Outlook) combined with the sophisticated UI 
capabilities of WPF that's connected to remote data 
and services via WCF and use the RAD features of 
LINQ to manipulate that data. These new technologies 
provide opportunities for building powerful solutions 
with functionality that was previously difficult or 
impossible to achieve. Now that Office has evolved 
into a true development platform, Office-based solu- 
tions are becoming increasingly sophisticated, less 
document-focused, and more loosely coupled. This 
session will show you how easy it is to build robust 
solutions that leverage the latest technologies. WPF 
provides developers and designers with a unified pro- 
gramming model for building rich Windows smart 
client user experiences with Office client applications 
that incorporate UI, media, and documents. WCF con- 
tains a support framework and a design-time toolset 
for building service-oriented solutions that connect 
rich Office clients with powerful server-side function- 
ality and remote data access. Visual Studio 2008 pro- 
vides a simple GUI wizard that lets you consume WCF 
services without having to worry about service meta- 
data, protocols, or XML configuration. 


WPF-NOT JUST THE WINDOWS CLIENT: 
SILVERLIGHT AND SURFACE 

TIM HUCKABY 

This session will be heavily demo-focused to 
accentuate how the power of WPF can be used to 
build amazing Silverlight and Microsoft Surface 
Applications. Microsoft Silverlight is a cross-brows- 
er, cross-platform, and cross-device plug-in for 
delivering the next generation of media experi- 
ences and rich interactive applications for the Web. 
This means that not only is Silverlight 2.0 a power- 
ful platform for data visualization that can be used 
to really "light-up" your applications, but it is also 
a browser-based technology that gives you broad 
reach without a heavy client install. And it's cross 
platform! Your Silverlight applications run identi- 
cally on the Apple Macintosh (and other) platforms 
as they do on Windows. Microsoft Surface is a 
Multi-touch product from Microsoft which is devel- 
oped as a software and hardware combination 
technology that allows a user, or multiple users, to 
manipulate digital content by the use of natural 
motions, hand gestures, or physical objects. And 
the best news is that you can build applications for 
it in WPF! Although | cannot promise lugging the 
300 Ib Surface table across country, | can show a 
number of real Surface applications, how they are 
built, and how you can build them in the emulator 
in Visual Studio. 
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DESIGNING POLISHED WPF INTERFACES 
WITH EXPRESSION BLEND 

MARKUS EGGER 

WPF (Windows Presentation Foundation) is a power- 
ful UI technology, and XAML represents a fascinating 
new way of programming WPF. However, without 
tools, WPF and XAML get tedious quickly, and a good 
designer is needed. Microsoft offers a whole set of 
such tools. This session focuses mostly on Microsoft 
Expression Blend (used in combination with Visual 
Studio). This session provides an overview of the 
goals, features, and characteristics of this tool and 
shows how to create a small next-generation appli- 
cation using it. This session also shows developers 
how good looking interfaces can be created using a 
few simple and repeatable tricks. 


UNDERSTANDING EFFICIENT USER 
INTERFACE DESIGN 

MARKUS EGGER 

The user interface is of tremendous importance as 
it is the only part of any given application that is 
visible to the user. Unfortunately, techniques and 
guidelines for efficient user interfaces remain a 
subject of mystery for most developers. This ses- 
sion explores user interface design on multiple lev- 
els. It discusses user interface design philosophy 
as well as specific techniques available in Visual 
Studio. The session presents many examples based 
on real-life applications. 


CONNECTING SMART CLIENTS THROUGH 
THE SERVICE BUS 

BRIAN NOYES 

Building a distributed application is tough enough, 
but standing up a full back-end services infrastruc- 
ture to support them can be too much for many 
applications and companies. Even if you have a 
back end services infrastructure, establishing the 
connectivity to all your client applications wherev- 
ег they are running may be even more challenging. 
By leveraging .NET Services, Azure Services, or 
other forms of cloud services, you can build out a 
robust smart client architecture with minimal 
infrastructure requirements. This session will look 
in detail at several common connectivity scenarios 
for smart client applications, including peer-to- 
peer communications, sharing documents and 
files, and publish-subscribe communications with 
other services, all leveraging the cloud services 
model. You'll see what you can achieve on your 
own through .NET Services, and will also see where 
Azure and Live Services can add capabilities that 
would be extremely costly and challenging to add 
on your own. The session will walk you through the 
concerns of connecting from smart client and 
Silverlight clients, and you will see how to switch 
your connections from your own back end services 
to cloud services with ease. You'll also get and see 
how to use some great helper classes for working 
with cloud services. 


BUILD COMPOSITE WPF APPLICATIONS 
BRIAN NOYES 

When you build a WPF application of any serious 
complexity, your code complexity can get out of con- 
trol pretty quickly, leading to slowdowns in develop- 
ment, poor testability and poor maintainability. 
Composite Application Guidance for WPF gives you 
the tools and patterns you need to manage that 
complexity. This session will cover what Composite 
Application Guidance for WPF contains, what it does 
for you and how to use each of its features. You will 
learn how to build WPF applications that are com- 
posed of loosely-coupled, dynamically loaded mod- 
ules that plug in their functionality to the application 
using Ul composition patterns. You'll also learn how 
to leverage the commanding and eventing infra- 
structure provided by the guidance to allow your 
handling code for commands and events to stay 
decoupled from the UI definition itself. You also learn 
a little bit about dependency injection, testability, 
and UI patterns along the way. 


ALL THAT YOU CAN LEARN ABOUT LINQ 
IN ONE HOUR 

DINO ESPOSITO 

In nearly all applications, at some point, persistent 
data gets loaded in one or more container objects to 
be queried. Depending on the capabilities of the con- 
tainer, a different query API may be in use, be it 
XPath, SQL, or methods on a super-array class. LINQ 
was created to unify the query model for a variety of 
data containers and data formats. As long as a com- 
mon query model exists, you can use a single query 
language regardless of storage and internal repre- 
sentation of data. In the .NET Framework 3.5, LINQ 
makes the query a first-class construct and places it 
at the same logical level of classes and methods. The 
query engine is mapped to keywords in СЕ and VB 
and allows you to query and update data from a vari- 
ety of supported data sources, including XML, соПес- 
tions and DataSets. In this session, you'll learn as 
much as possible about the LINQ architecture and, 
more importantly, you'll make sense of it and get 
familiar with its essential facts and features. 


INTRODUCING THE .NET SERVICE BUS 
JUVAL LOWY 

The .NET services bus is part of the new Microsoft 
Cloud Computing Windows Azure initiative, and 
arguably, it is the most accessible, ready to use, pow- 
erful, and needed piece. The service bus allows 
clients to connect to services across any machine, 
network, firewall, NAT, routers, load balancers, virtu- 
alization, IP and DNS as if they were part of the same 
local network, and doing all that without compromis- 
ing on the programming model or security. The serv- 
ice bus also supports callbacks, event publishing, 
authentication and authorization and doing all that 
in a WCF-friendly manner. This session will present 
the service bus programming model, how to config- 
ure and administer service bus solutions, working 
with the dedicated relay bindings including the avail- 


able communication modes, relying on authentica- 
tion in the cloud for local services and the various 
authentication options, and how to provide for end- 
to-end security through the relay service. You will 
also see some advanced WCF programming tech- 
niques, original helper classes, productivity-enhanc- 
ing utilities and tools, as well as discussion of design 
best practices and pitfalls. 


DURABLE WCF SERVICES 

JUVAL LOWY 

Consider using WCF to implement long-running work- 
flows or execution sequences that lasts days or even 
weeks, where the clients may connect, do some work 
and disconnect again. There is obviously little point 
in keeping proxies and hosts in memory, since it is 
not robust or scalable enough. You can deign around 
this by persisting the state of the service between 
operations, but that implies some ability to connect 
back to that state in each operation. The session 
starts by discussing the challenges of writing such a 
durable service and the design options, and then 
demonstrates several ways of managing and binding 
to the service state, using message headers, or the 
new .NET 3.5 context binding, contrasting and evalu- 
ating the alternatives. Through a series of conceptu- 
al demos, the session demystifies the WCF-solution 
of persistence providers, and even how to write a 
custom provider or use the built-in SQL provider. You 
will also see some advanced .NET and WCF program- 
ming techniques. 


TRANSACTIONS FOR THE COMMON 
SERVICE 

JUVAL LOWY 

Transactional programming has traditionally been 
the privilege of database-centric applications. Other 
types of applications did not benefit easily from this 
superior programming model. In addition, transac- 
tional programming has always required per-call 
objects, which is a non-trivial programming model. 
But wouldn't it be great if you could preserve the 
programming model of regular objects and still ben- 
efit from transactions? The session starts by briefly 
discussing the problem space transactions address 
and the motivation for using them. It then discuses 
the WCF approach for instance management in the 
face of transactions, and how you could leverage the 
support in .NET 3.5 for the context binding and 
durable services to enable any common service (or a 
class) to benefit from transactions, without compro- 
mising on either the programming model of state- 
full objects or on the transactional semantics. 


GEMS AND DRAGONS 

KATHLEEN DOLLARD 

The .NET Framework is so large that it's easy to over- 
look hidden gems tucked in the corners or to get 
burned by an unexpected dragon. You'll see gems in 
the.NET libraries and IDE - features that will make 
your code easier to write and maintain. These 
include things like System.AddIn, WPF async data 


loading, generics, System.Exception.Data, snippets, 
custom task lists, VB 9 XML literals, tricks with object 
browser and document outline. Powerful as .NET is, it 
also includes its share of nasty surprises, and you'll 
see things like inconsistencies between VB and С# 
nullable operators, nuances of overloading methods, 
the frightening pace of UI and data layer changes, 
immutability in anonymous types, inappropriateness 
of the new constraint, and unexpected LINQ re-eval- 
uations. This is a fast paced session and you'll walk 
away with new perspectives and the resources to 
further explore these topics. 


WINDOWS PRESENTATION FOUNDATION: 
BEYOND THE BLING 

KATHLEEN DOLLARD 

Have you seen Windows Presentation Foundation 
(WPF) portrayed as a way to spin photos on cubes 
and wondered what this had to do with you? WPF is a 
great tool to create business applications. It raises 
the bar on organizations and offers amazing tools to 
create beautiful interfaces. You'll learn about under- 
lying fundamentals and see some nice interfaces to 
get you thinking of how to take advantage of WPF in 
your own business applications. The underlying WPF 
model separates the definition behavior, layout and 
appearance of your application. You'll see how XAML 
expresses each part of this triad as well as what's 
supported by the newest tools. This will be present- 
ed in the context of a business application that incor- 
porates a variety of WPF controls, user controls, lay- 
out controls, command patterns and graphics. At the 
end you'll see the rather ugly programmer-created 
application drastically transformed by the hands of 
an artist into a beautiful and functional final product. 


.NET 4.0 LANGUAGE AND IDE FEATURES 
KATHLEEN DOLLARD 

Unveiling the next version of .NET lays out new lan- 
guage features building on the trend increasing the 
dynamic characteristics of СЕ and Visual Basic. New 
language features will fall into categories of new fea- 
tures to support the current drivers, cross-over of 
features between the languages, and IDE improve- 
ments to ease your programming experiences. The 
current drivers for the languages are declarative 
coding, dynamic programming and concurrency. 
You'll see how a vision of the languages is evolving 
from these driving forces-building on the dynamic 
features separately developed for LINQ and in the 
DLR. You'll also see how the combined language team 
is balancing distinction and parity in areas such as 
late binding, XML and lambda expressions. The next 
release will present a major overhaul of Visual Studio 
itself. This offers exciting possibilities for improving 
your coding and debugging experience, including 
changes to document mapping and visualizing the 
structure of your object models and code dependen- 
cies. You'll leave knowing what you can look forward 
to in the next version, as well as a better feel for the 
overall direction of the languages. 
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GETTING YOUR TECHNICAL WORK 
PUBLISHED 

WILLIAM R. VAUGHN 

This session is designed to help those who would like 
more professional exposure and prestige through 
technical writing. Have you ever had a great idea that 
you wanted to spread to the world but didn't really 
know how to get started? Have you ever wanted to 
have the phrase "Published Author" and a list of 
papers or books listed on your resume? Have you 
ever felt that you could write better documentation 
than Microsoft or almost anyone? Have you ever 
wanted to impress your mother-in-law and show up 
your cousin whose book on mushroom farming sits 
on her coffee table? Did you ever wonder how authors 
get past the hurdles put up by the publishers and edi- 
tors? This session is designed to show developers and 
the technically inclined what they need to know to get 
started toward being published authors. We'll talk 
about how to take a technical concept and get it into 
a national or international print or online magazine. 
We'll discuss how to find a publisher and what to do if 
they find you. We'll talk about editors, contracts, 
advances and how to invest the... well, we'll talk about 
what it pays and the other rewards as well. 


WS* OR REST? CHOOSING THE RIGHT 

APPROACH FOR YOUR WCF SERVICES 

MICHELE LEROUX BUSTAMANTE 

Service-Oriented Architecture (SOA) is no longer syn- 
onymous with WS*. In fact, with the pervasiveness of 
Web 2.0 client applications that use technologies 
such as AJAX and Silverlight, alternatives are neces- 
sary for exposing business logic and data. Although 
the architectural model for services defined by 
Representational State Transfer (REST) has been 
around almost as long as SOAP protocol, it is increas- 
ingly popular not only among Web 2.0 zealots but also 
in corporate environments designing service-orient- 
ed applications. This session will compare the two 
approaches, WS* and REST, and discuss the features 
that make each approach popular while illustrating 
how to implement each with the WCF platform. 


FEDERATED SECURITY SCENARIOS WITH 
WCF AND ZERMATT 

MICHELE LEROUX BUSTAMANTE 

The WCF security model has always supported a rich, 
claims-based approach to authorization. Normalized 
claims are the heart of any federated security model 
-allowing developers to decouple how tokens are 
mapped to a set of domain-specific claims, and 
appropriately decouple how users are authorized 
based on those claims. In a federated scenario, a 
Security Token Service (STS) is typically used to issue 
tokens that carry these domain-specific claims. 
Zermatt is a developer framework that greatly sim- 
plifies the process of building a custom STS for token 
issuance. In addition, Zermatt supplies a program- 
ming model to simplify interaction with claims at 
runtime. This session will explore the features of a 
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federated security scenario with WCF and Zermatt. 
You'll see how Zermatt simplifies building a custom 
STS, learn how to require tokens issued by an STS 
using WCF federation bindings, and how to interact 
with claims during authorization. 


ARCHITECTURAL SCENARIOS FOR 
WORKFLOW SERVICES 

MICHELE LEROUX BUSTAMANTE 

WCF makes it easy to wrap business functionality 
behind a service boundary but does not make any 
assumptions about the order in which service 
operations will be called-coordination is up to the 
application. Workflow can help in the middle tier to 
coordinate complex business processes and auto- 
mate the flow of messaging between users, appli- 
cations and services. Workflow Services are a fea- 
ture of .NET Framework 3.5 that improves commu- 
nication between WCF and Workflow. This session 
will review architectures that can benefit from 
Workflow Services; explore the implementation of 
ReceiveActivity and SendActivity for each sce- 
nario; and discuss security options, limitations and 
workarounds. 


SECURING WORKFLOW SERVICES 
MICHELE LEROUX BUSTAMANTE 
Workflow Services are a feature of .NET Framework 
3.5 that improves communication between WCF and 
Workflow. You can expose a workflow as a WCF serv- 
ice and you can call WCF services from an executing 
workflow instance. If you care about security-and 
most of us do-you will want to know how you can 
secure calls into the Workflow Service through each 
ReceiveActivity, and how you can make secure calls 
to WCF services from a SendActivity. This session will 
illustrate typical scenarios for Workflow Services and 
focus on the security features available for those 
scenarios given the rich nature of WCF security con- 
figurations, and any limitations related to security 
discussing workarounds where applicable. 


WPF: AN INTRODUCTION FOR THE 
BUSINESS PROGRAMMER (FUNDAMENTALS) 
PAUL D. SHERIFF 

Windows Presentation Foundation, is it really for 
business applications? Why would you choose this 
over standard .NET Windows Forms? This session will 
give you an introduction to this technology and show 
you where and when it can be appropriate. 


BUILD A SECURITY SYSTEM FOR 

WINDOWS FORMS USING CLIENT 
APPLICATION SERVICES 

PAUL D. SHERIFF 

When ASP.NET 2.0 came out, Microsoft gave a nice 
Membership Service to use for User and Role man- 
agement. In .NET 3.5, Microsoft has made that serv- 
ice into a set of Web Services that can be used 
from Windows Forms in Visual Studio 2008. This 
session will explore how to take advantage of 
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these services in Windows Forms and thus save 
you hours of work developing your own User and 
Role management system. 


TESTING WPF APPLICATIONS USING THE 
MICROSOFT UI AUTOMATION LIBRARY 
JAMES MCCAFFREY 

Applications built with Microsoft's Windows 
Presentation Foundation (WPF) technologies require 
new approaches to testing. In this presentation, you 
will learn both principles and specific techniques for 
quick and efficient testing of WPF-based applications 
using the new Microsoft Ul Automation (MUIA) 
library. Topics covered include: how and why testing 
WPF-based applications is different from testing clas- 
sic WinForm-based applications; creating and execut- 
ing Ul test automation using the MUIA library; and 
managing MUIA-based test automation with Visual 
Studio. You will leave this session with a solid under- 
standing of techniques available to you to test .NET 
applications built using WPF technologies, when 
these techniques are appropriate to use, and when 
alternate techniques are preferable. 


DEVELOPING SERVICE ORIENTED 
WORKFLOWS 

BRIAN NOYES 

Windows Workflow Foundation (WF) fits nicely into 
service-oriented applications for designing the work- 
flows that implement the business processes a serv- 
ice exposes. This session covers how to expose work- 
flows as services, both as encapsulated implementa- 
tions of portions of service processing, and by expos- 
ing a workflow as a service itself. It also covers how 
to call out services from within a workflow and coor- 
dinate the results of those service calls with the rest 
of the workflow processing. Learn how to integrate 
workflow processing logic with other service pro- 
cessing logic through the host communications 
model of WF, as well as how to use the Microsoft .NET 
Framework 3.5 WF Send and Receive activities and 
Windows Communication Foundation (WCF) context 
bindings to achieve a seamless integration of WF and 
WCF. Also, learn how this combination allows you to 
create durable services that add robustness and 
scalability to your architecture. 


REFACTORING TODAY'S .NET CODE TO 
OLD GOOD SOFTWARE DESIGN 
PRINCIPLES 

DINO ESPOSITO 

Just as an architect wouldn't design a house ignor- 
ing the laws of gravity, a software architect shouldn't 
design a piece of software ignoring basic principles 
of software design such as low coupling and high 
cohesion. Just as an architect wouldn't design a 
house ignoring building codes that apply to the con- 
text, a software architect wouldn't design a piece of 
software ignoring common practices and known 
solutions that work. Is this what really happens in the 
real world? Powerful RAD tools and the imponderable 


weight of the time-to-market variable created in the 
МЕТ space a historical delay in the adoption of prac- 
tices and patterns for good software design. From 
the developer's standpoint, there's a sort of five-year 
backlog in the understanding of techniques such as 
dependency injection and composition and design 
values such as testability, coupling, responsibility, 
separation of concerns, information hiding, even 
security. In this session, we'll go through a number of 
simple classes and see how to improve the design to 
achieve low coupling, single responsibility, and testa- 
bility. You should not expect to hear completely new 
and revolutionary concepts-everything being dis- 
cussed in the session refers to concepts and state- 
ments made for the first time at least 15 years ago. 
What's new, instead, is the applicability of these con- 
cepts to the .NET space. As emphatic as it may seem, 
such fundamental concepts of software engineering 
are unknown to a large share of .NET developers. 
Another significant share of .NET developers, 
instead, forgot them entirely in the heat of writing 
production code. Finally, yet another share of .NET 
developers are discovering good principles of soft- 
ware design today under the goad of new tools such 
as testing products, dynamic proxies, and 10С con- 
tainers. Whatever share you're in, this session will 
rejuvenate your design spirit. 


WCF THE MANUAL WAY... THE RIGHT WAY 
MIGUEL CASTRO 

Visual Studio 2008 has plenty of templates to get us 
started with WCF, but with that comes a lot of extra 
weight that we simply do not need. They also do not 
encourage property assembly breakdown and 
reusability. In this session, I'll teach you how to write 
WCF services in a completely manual fashion, includ- 
ing both the service side and the client side. You'll 
see that it's not hard, not a lot of work, and results in 
a much cleaner solution. We'll keep WCF short, sweet, 
and to the point, just like this abstract. 


INTRODUCING WINDOWS WORKFLOW 4.0 
KATHLEEN DOLLARD 

Windows Workflow was rewritten from the ground 
up for .NET 4.0. If you're using WF today, this ses- 
sion shows the implication of the new version on 
your workflow strategy. If you've avoided WF 
because it seemed overly complex for your appli- 
cation, check out the simplicity of the new 
approach. Development may be ten times faster, 
while the runtime may be 10 to 100 times faster. 
Integration with WCF is simple and core to the 
communications strategy. Composition of multiple 
workflow styles like state machines and flowchart 
workflows is seamless. The Visual Studio 2010 
workflow designer is brand new. It's based on WPF 
and supports a solid rehosting model so you can 
easily include a workflow designer in your applica- 
tion. New workflows are fully declarative. There is 
no code activity, no code-beside, no Data Exchange 
Service, no initialize event, and no dependency 


properties. Come to this session and learn how to 
build activities with the new authoring model, how 
to manage communications with WCF, use the 
interop activity to preserve your existing WF 
investments where needed, and how to tweak your 
3.0/3.5 workflows today to ease the transition to 
the new simpler workflow model. 


TOOLS AND LANGUAGES TRACK 


MANAGING PARALLEL DEVELOPMENT: 
BRANCHING AND MERGING WITH VISUAL 
STUDIO TEAM SYSTEM 

JEFF LEVINSON 

Are too many branches leaving you tired and over- 
worked? Not quite sure where your code is? Does 
your teammate keep overwriting your code? In this 
session you will learn how to set up solid branching 
structures and perform merges to help avoid things 
like code freeze, losing your code, and how to avoid 
the dreaded cherry-pick merge. Learn the standard 
branching patterns and when to use them as well as 
when not use them. 


LIFE AFTER VSS: TEAM FOUNDATION 
SERVER VERSION CONTROL 

JEFF LEVINSON 

Ready to move to a more scalable, secure, and reli- 
able version control tool? Learn how to set up Team 
Foundation Server Version Control to take advantage 
of all of its features. Learn the differences between 
the two and take advantage of the power of work 
items to help keep track of your work. This session 
will also cover converting your code from VSS to 
Team Foundation Server Version Control using the 
VSS Converter tool. 


HOW TEAM FOUNDATION SERVER WORKS 
IN THE REAL WORLD 

JEFF LEVINSON 

Team Foundation Server solves problems-all sorts of 
problems. In this session, you will learn some of the 
real-world situations in which Team Foundation 
Server helped companies and development teams in 
need. Some of the areas include SOX, PCI and HIPAA, 
change management, requirements traceability, 
reducing defects (catching them early and often), 
release management and communication issues. 


BUILD UNIT TESTS THE EASY WAY WITH 
VISUAL STUDIO 2008 

PAUL D. SHERIFF 

Everyone knows that they should be writing better 
test cases for their applications, but how many of us 
really do it? In Visual Studio 2008, testing is an inte- 
grated part of the development environment. So 
there is no longer any reason to avoid not doing test- 
driven development and automated unit testing. In 
this session, you will learn how to architect your 
applications to make testing quicker and easier. You 


will learn to use the tools in Visual Studio 2008 to 
help you do the testing. 


VB.NET ROCKS WITH LINQ TO XML! 

PAUL D. SHERIFF 

LINQ technology in .NET 3.5 has some great hooks 
into XML that make using XML documents a breeze. 
This session will explore how you will put this tech- 
nology to work in your applications using VB.NET. 
Many XPath queries can be greatly simplified using 
LINQ. Besides the obvious advantages of using LINQ 
to iterate over XML data, you can also use it to create 
and process XML documents. VB.NET has some excit- 
ing features such as Intellisense and XML literals. 
These features alone are enough to convince Cit pro- 
grammers to use VB.NET. In this session, you will 
learn to use LINQ to XML for building real-world appli- 
cations. You will learn to use XML for prototyping 
screens, menus, merge XML data with Word 2007 
documents, and even see how to create a data class 
wrapper around LINQ to XML. 


.NET SYNCHRONIZATION TECHNIQUES 
FOR TODAY'S APPLICATIONS 

MICHELE LEROUX BUSTAMANTE 
Multithreading is a staple in today's applications 
whether you are building WPF clients, ASP.NET appli- 
cations or WCF services. Rich and interesting WPF 
applications are likely to rely on multithreading to 
optimize concurrent Ul updates resulting from 
remote calls to services-which means that the appli- 
cation must manage threads it creates and synchro- 
nize access to the Ul. By nature, ASPNET and WCF 
applications execute on the server and service mul- 
tiple concurrent threads-which means that any 
shared resources across threads must be synchro- 
nized. This session will discuss necessary .NET multi- 
threading concepts useful for these application sce- 
narios. Discussions will include techniques for creat- 
ing and managing threads; using thread pool threads 
versus custom worker threads; and compare syn- 
chronization techniques such as Monitor, Mutex, 
Semaphore, ReadWriterLock, Interlocked and 
MethodlmplAttribute. 


.NET INTERFACE-BASED PROGRAMMING 
JUVAL LOWY 

Separation of interface from implementation is a 
core principle of component-oriented program- 
ming. The client is coded against an abstraction of 
a service (the interface), not a particular imple- 
mentation of it (the object). This session starts by 
presenting .NET interfaces and describing various 
interface-based programming techniques. Next, 
you will see how to address a set of practical 
issues involving the definition and use of inter- 
faces, such as Generics and interfaces, how to 
implement multiple interfaces or how to combine 
interfaces and class hierarchies. The session ends 
with a discussion of interface design and factoring 
guidelines, and points out the best practices. 


` VISUAL STUDIO & „МЕТ SESSIONS | 


MEMORY MANAGEMENT IN .NET 

CARL FRANKLIN 

What? | thought the .NET Framework was all about 
taking memory management off the table That's true, 
but you can still shoot yourself in the foot while work- 
ing with certain types of objects. The .NET Garbage 
Collector is a very sophisticated piece of software, 
but in order to harness its power you need to know 
what to do, when to do it, and more importantly, why. 
In this session I'll talk about IDisposable, memory 
pressure, using COM objects and unmanaged wrap- 
pers, generations, and everything you need to know 
to make sure your applications don't leak. 


REFLECT ON .NET REFLECTION 

DINO ESPOSITO 

In the .NET Framework, reflection is the API to access 
and inspect metadata programmatically. Visual 
Studio uses reflection for Intellisense and a lot of 
framework classes make a large use of it. Reflection 
enables you to read characteristics of assemblies 
including compiled modules and exposed types. You 
can read information added by custom attributes 
and perform late binding by dynamically instantiat- 
ing and invoking methods on types. Reflection is a 
pillar of most extensibility features and factories you 
see around in many products and technologies. 
Reflection, for example, is at the foundation of test- 
ing tools. This session reviews aspects of reflection 
in the .NET Framework and suggests some interest- 
ing applications. 
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SERVICE-ORIENTED DEVELOPMENT PROCESS 
JUVAL LOWY 

When you develop a service-oriented application, 
it would be naive of you to expect that the only 
things you will do differently will be limited to 
design and technology. The development process 
itself needs to be service-oriented. You cannot 
"stare into the fire" of WCF without a mature serv- 
ice-oriented development process supporting 
your effort. This session presents you with a serv- 
ice-oriented development process that you can 
apply to your WCF-based products to achieve 
robust applications, manage requirements and 
ensure faster time to market. 


ARCHITECTING CUSTOM TEST AUTOMATION 
WITH VISUAL STUDIO TEAM SYSTEM 
JAMES MCCAFFREY 

Writing lightweight custom test automation har- 
ness with languages such as C# and Perl has sev- 
eral advantages over using commercial or open 
source test frameworks. However, the primary dis- 
advantage of custom test automation is manage- 
ability; your test effort can be overwhelmed by 
the sheer volume of test case data files, test 
scripts, and test result files. Visual Studio Team 
System provides you with the ability to design and 
manage a test effort which includes custom test 
automation. Topics covered include: understand- 
ing test architecture, creating a Generic test type, 
managing custom test automation, emitting 
detailed .trx test results, and managing test result 
storage. You will leave this session having a firm 
grasp of how and when to use Visual Studio Team 
System to manage custom test automation. 


EVOLUTION OF THE DAL: PATTERNS 
BEHIND LINQ TO SQL, ENTITY 
FRAMEWORK AND 0/RM TOOLS 

DINO ESPOSITO 

Conceptually, the data access tools consist of a 
group of classes and methods for accomplishing 
read/write operations. A read/write operation 
generally manipulates some data in input and/or 
output and targets a data storage system. For 
years, architects designed applications to work on 
tabular data (mostly recordset-like structures 
such as DataSets) and to target relational data- 
bases. And for years architects had no impedance 
mismatch between tabular 1/0 data and a RDBMS 
to face. Recently, the advent of object-orientation 
in the realm of the middle tier changed the sce- 
nario quite radically. The data access layer is no 
longer an appendix to the business layer, but is 
neatly separated from business logic. Business 
logic is expressed through an object model and 1/0 
(and only 1/0) is delegated to the data access 
layer. In a recordset world, the business and data 
access layer were basically the same layer of 
code; in an object-oriented world, they are distinct 
entities. The complexity of the data access layer is 
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greater because it now has to deal with the per- 
sistence of object graphs into a relational data- 
base. In this session, we'll identify the responsibil- 
ities of a data access layer and the right patterns 
that address them. Finally, we'll try to find signs of 
these responsibilities in common-use technolo- 
gies for a data access layer, including ADO.NET, 
LINQ to SQL, and Entity Framework. 


DESIGNING A DOMAIN-BASED DATA MODEL 
DINO ESPOSITO 

For years, layers of .NET applications have been 
using and exchanging typed DataSets. The DataSet 
has a number of nice features. It is serializable, can 
contain persistent and transient data, supports a 
query model, and manages concurrency and batch 
updates. Its only significant drawback is the model of 
data, which is invariably recordset-based. Modern 
applications, though, often require a different model 
of data to better express the complexity of the 
domain space and entities. In a domain-driven 
design scenario, the data model comes out as com- 
pletely decoupled from its persistence layer which 
raises the need for an OR/M tool to serialize and 
deserialize the model to and from a data store. In this 
session, you'll understand the motivation of a 
domain-based data model and explore patterns that 
provide guidance on how to effectively design the 
model for your scenario. 


CODE GENERATION IN THE ENTERPRISE 
KATHLEEN DOLLARD 

Code generation offers one of the most viable 
options for directly expressing the details of your 
architecture throughout your enterprise. You'll 
retain confidence that the architecture is being 
used correctly, limit or generate certain types of 
tests, and allow evolution of the architecture 
under your control. This session covers an intro- 
duction into template styles and then moves on to 
focus on the big picture of code generation in a 
tool neutral manner. You'll see approaches to 
extracting metadata stores, managing template 
sets, providing enterprise configuration, protect- 
ing handcrafted code and versioning templates. 
Whether you're new to code generation or ready 
to improve its effectiveness in your enterprise, 
you'll leave this session with new perspectives 
and new techniques. 


BLOCK BASED DEVELOPMENT 
KATHLEEN DOLLARD 

Applications run today in chunks. They reside in 
thin and thick layers on intelligent devices, web 
servers, and application servers. We chop up 
applications across logical data tiers, physical 
location, and ownership. This session focuses on 
the human scale engineering behind these chunks 
and the tools available to manage these blocks in 
the broader picture of your application-compar- 
ing and contrasting services, workflow activities, 
and plug-ins/add-ins. You'll see how these differ- 


ing approaches are synergistic as this session 
spends a lot of time with how to leverage them 
working together-including add-ins supporting 
services, workflows calling services and services 
calling workflows. You'll leave this session better 
prepared to choose the right tools to build appli- 
cation ecosystems developed and maintained in 
manageable blocks that can be individually prior- 
itized and completed by reasonably sized teams in 
response to business requirements. 


DESIGN TESTABLE CLIENT AND SERVICE 
APPLICATIONS 

BRIAN NOYES 

Anyone can write a simple unit test for a calcula- 
tor Add method once you spend a few minutes fig- 
uring out how to set up and run the tools. 
However, the real trick to keeping unit testing 
from becoming as much of a burden as it is a ben- 
efit is to design for testability. This session will 
explore the patterns and practices you need to 
employ when designing both client and service 
applications so that you can unit test them as eas- 
ily as possible. Whether you choose a test-first 
approach to coding, or just write the unit tests as 
you write the code, you will need to know how to 
make your classes testable and what the scope of 
those tests should be. This session will show and 
demonstrate design patterns for injecting 
dependencies into your classes so that you limit 
the scope of the test to just the "unit" under test. 
You'll see how to do this manually through con- 
structors or properties, and you will also see how 
a dependency injection container can make this 
much easier. You will also learn about several 
approaches and tools for creating mock and stub 
objects that you use with your tests. Finally, you 
will learn some guidance on what your tests 
should actually test, how many things to do in a 
test, and how to test things like an asynchronous 
service call chain in a smart client application. 


DESIGNING APPLICATIONS FOR 
EXTENSIBILITY 

MIGUEL CASTRO 

"Just write the application like this, it will never 
have to change". We've all heard this one from 
managers or customers, and we all know if never, 
ever works out that way. Building extensible appli- 
cations allow you to handle this all-too-common 
situation in a more elegant and productive way. l'Il 
show you three extensibility patterns that you can 
use when you design your application that will 
allow you to modify and enhance it in the future 
with ease. You'll learn how to design parts of your 
application to use providers, how to design a plug- 
in scenario, and an even more elegant module pat- 
tern that lets you really polish up your application 
with its own API. 


(CONNECTIONS 


NEN 


НМ501: DEVELOPING FOR SHAREPOINT IN 
THE CLOUD 
MICROSOFT 


НМ502: ENHANCING YOUR SHAREPOINT 
SITES WITH SILVERLIGHT 
MICROSOFT 


НМ503: INTRODUCTION TO USING VISUAL 
STUDIO TO DEVELOP FOR SHAREPOINT 
MICROSOFT 


НМ504: MASHING UP THE WEB: 
SHAREPOINT AND SHAREPOINT DESIGNER 
MICROSOFT 


HMS05: SHAREPOINT WEB CONTENT 
MANAGEMENT: IT'S NOT ALL ABOUT THE 
INTRANET 

MICROSOFT 


НМ506: CUSTOMIZING AND EXTENDING 
SHAREPOINT SEARCH 
MICROSOFT 


НМ507: USING SHAREPOINT TO BUILD 
BUSINESS INTELLIGENCE SOLUTIONS 
MICROSOFT 


НМ508: CUSTOMIZING AND BRANDING 
YOUR SHAREPOINT SITE 
MICROSOFT 
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HBI201: SHAREPOINT AND BUSINESS 
INTELLIGENCE 

LEONARD MWANGI 

Business intelligence is the core of most organiza- 
tions because it helps the business make informed 
decisions based on data that's available for analy- 
sis. In this session, we will look at integrating 
SharePoint and SQL Server Reporting Services, 
use SharePoint Reports Center to create a dash- 
board that's data driven, and analyze it using 
SharePoint Excel services and SQL Server Analysis 
Services. 

We will also look at key performance indicators 
(KPl'S) and how they can generate data from 
either Excel Services or SQL Analysis Services. 


HDA201: USING SHAREPOINT SINGLE SIGN- 
ON (SSO) TO AUTHENTICATE USERS TO 
DIFFERENT ISV APPLICATIONS 

LEONARD MWANGI 

In the current era of information management, 
authentication is required to access most of infor- 


mation that is deemed useful for users to get their 
job done. This call for multiple logins that users 
are required to remember and store can result in 
a security breech. Microsoft Office SharePoint 
Server provides a Single Sign-On capability that 
stores and manages user's authentication infor- 
mation for different ISV applications. 

In this session we will look at the configuration for 
550 and how it can be leveraged to store login 
information for users and authenticating ISV 
applications from SharePoint navigation. 


HDA202: SITE PROVISIONING SOLUTIONS 
MICHAEL BLUMENTHAL 

Do you need to have a level of corporate gover- 
nance and an approval process in place for 
requests for SharePoint sites? Do you find that 
team collaboration sites are so popular that the 
number of requests are overwhelming but you 
can't bring yourself to let users create sites willy- 
nilly on their own? There is a middle ground! In 
this session, I'll discuss a site provisioning solu- 
tion where the user submits a request for a site 
that includes custom site profiling, then workflow 
processes review the request, and approval leads 
to automated site creation. 


HDA301: OPTIMIZING SHAREPOINT 
CONTENT DATABASE STRUCTURE 
MICHAEL NOEL 

A common mistake made when deploying 
SharePoint is to organize all of the Site Collections 
into a single content database. While this is the 
default deployment option, it can unfortunately 
have negative consequences for scalability and 
recovery of the SharePoint content databases. This 
session focuses on allowing participants to under- 
stand the best practice content database design 
and deployment for new and existing SharePoint 
farms. Various techniques that can be used to 
divide new Site Collections across multiple content 
stores are described in detail. In addition, new fea- 
tures in the STSADM command line tool that permit 
existing site collections to be moved across multi- 
ple new content databases are demonstrated. 


HDA302: BACKUP AND RESTORE FOR 
SHAREPOINT: PROTECTING MISSION 
CRITICAL SHAREPOINT DATA WITH NEW 
TOOLS AND TECHNOLOGIES 

MICHAEL NOEL 

As more and more organizations use SharePoint 
to store documents and other critical data, it 
becomes imperative to provide for backup and 
restore specific for SharePoint. While some inte- 
grated tools exist to provide for disaster recovery, 
document-level restore capabilities are often 
needed in a SharePoint environment. This session 
covers some of those technologies and focuses 


specifically on how the new Microsoft System 
Center Data Protection Manager (DPM) 2007 prod- 
uct can be used to provide for SharePoint-specific 
backup and item-level restore. In addition, 
specifics on how to integrate DPM with a Microsoft 
Office SharePoint Server 2007 or Windows 
SharePoint Services farm are provided and best 
practice architectural examples for DPM, snapshot 
guidelines, and deployment tips and tricks from 
the field are covered. 


HDA203: HOW TO EFFECTIVELY MANAGE 
YOUR SHAREPOINT CUSTOMIZATIONS, 
DEPLOYMENTS, AND ENVIRONMENTS WITH 
SOLUTION PACKAGES, SOURCE CONTROL, 
AND SOLID GOVERNANCE 

PHILLIP WICKLUND 

Development deployments across your farms are 
difficult to manage, especially if you have a large 
team. Chaos can reign, all the way from coding, to 
testing, and to environment consistency and sta- 
bility. The solution lies with implementing best 
practices and good, clearly defined leadership. 
Come learn how to control the chaos! 


HFW301: BUILDING A FRAMEWORK FOR 
YOUR INFOPATH 2007 WEB-BASED FORMS 
MICHAEL LOTTER 

With the maturity of the new versions of 
SharePoint and InfoPath brought Web-based 
InfoPath forms and the reality of deploying an 
electronic form-based solution in the enterprise. If 
anybody has gone down this path you quickly real- 
ize that having the forms browser-based really is 
the tip of the iceberg. In this session, we go into 
the details about building a Web service framework 
to allow InfoPath forms to reach out and communi- 
cate with other applications and how you could 
read the content of your InfoPath forms and mes- 
sage bodies when being processed by WF workflow. 


HFW302: GETTING INFOPATH 2007 FORMS 
WORKING ACROSS SITE COLLECTIONS, 

EVEN WEB APPLICATIONS 

MICHAEL LOTTER 

When working with enterprise-level clients, they 
always want to push the envelope of what can be 
done out of the box for any product. Recently | was 
asked if you could submit InfoPath 2207 browser- 
based forms across Site Collections and said | was 
pretty sure it couldn't be done but | wanted to look 
at again to make sure. After doing some digging 
into Data Connections files and lots of testing | 
found out that it was possible with InfoPath 2007 
and MOSS Enterprise. This session gets into the 
details on what has to be done to make it possible 
to submit InfoPath 2007 browser-based forms 
across site collections and the post configuration 
that needs to be done so the form can be opened 
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afterwards. We will also look at some Ctt code that 
shows how to automate the post configuration 
work so that everything is automated. 


HSA201: INFORMATION ARCHITECTURE FOR 
A MOSS INTRANET 

MICHAEL BLUMENTHAL 

So you've built your MOSS server farm. You now 
have all the infrastructure in place to host your 
first user-facing site, and it's the corporate 
intranet. What now? In this session, I'll provide 
guidance on organizing your new intranet so that 
it is well organized and easy to use. I'll also dis- 
cuss the steps to take to get from your site hier- 
archy plan to implementation. Learn how to inte- 
grate needs for publishing, collaboration, and 
applications into one consistent user experience. 


HSA301: VIRTUALIZING SHAREPOINT 
COMPONENTS 

MICHAEL NOEL 

Server virtualization technologies have taken front 
stage recently and many organizations have begun 
to seriously contemplate replacing physical servers, 
including SharePoint servers, with virtualization 
technologies. This session focuses on real-world 
architecture and best-practice recommendations for 
incorporating SharePoint architecture into virtual- 
ized environments running with either Microsoft's 
Virtual Server 2005, Microsoft's Windows 2008 
Hyper-V Virtualization, EMC's VMware Server, and 
Citrix Xen Server products. In addition, special focus 
is placed on virtualization management and provi- 
sioning using tools such as System Center Virtual 
Machine Manager (VMM). The session also focuses on 
outlining which specific components of SharePoint 
operate well in a virtualized environment versus 
which ones are not necessarily good candidates. In 
addition, this session gives an in-depth look at real- 
world designs for SharePoint using both major virtu- 
alization products and outlining the strengths and 
weaknesses of each product in relation to SharePoint 
functionality and supportability. 


HSA101: GET YOUR SHAREPOINT PROJECT 
STARTED RIGHT 

ROBERT L. BOGUE 

Are you just starting your SharePoint project? Are 
you concerned about what problems may lie on the 
road ahead? In this session, you'll see 7 different 
kinds of SharePoint projects and how they do-and 
do not succeed. You'll discover 10 common risks 
and how they impact your type of project. You'll get 
tips to make your project more successful. 


HCU301: HOW TO CREATE CUSTOM LIST 
DEFINITION FEATURES 

DOUG WARE 

The power of a SharePoint site comes from its lists 
and document libraries. While there are many 
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excellent general use list templates available out 
of the box, requirements often call for versions 
specialized for your business. SharePoint provides 
a few different methods for creating custom list 
definitions between the browser interface and 
developer-focused techniques using Visual Studio 
and XML. This presentation explains various alter- 
natives and provides guidance on choosing an 
approach based on different requirements. In this 
session, you will learn straight-forward tech- 
niques for defining and deploying your own spe- 
cialized list and document library definitions as 
features and solution packages using site 
columns, content types, and list definitions. 


HCU302: PROGRAMMING WITH 
SHAREPOINT LISTS 

DOUG WARE 

The SharePoint object model provides a wealth of 
classes that support working with lists, but they 
aren't always very intuitive! In this session, you 
will learn how to write code to perform the most 
common developer tasks. Come and learn how to 
create lists, access them, add, edit, and delete 
items and create queries. You'll also learn two 
ways to define and associate event receivers and 
assign permissions to lists and list items with .NET. 


HCU401: ANATOMY OF A SOLUTION, USING 
CUSTOM ACTIONS AND APPLICATION PAGES 
TO MANAGE ISSUES 

JOE SHEPHERD 

This session will walk users through building a 
solution that will use a Custom Action and an 
Application Page that will allow users to interact 
with specific list items. The solution will provide 
functionality that will allow users to send an e- 
mail directly from the item. The e-mail will contain 
an HTML representation of the item and the user 
will have the option of injecting the e-mail body 
back into the original item in the form of a com- 
ments field. This type of capability works good for 
issues or tasks lists because the administrator 
can send an e-mail directly from the list item and 
maintain visibility by tracking the body of the e- 
mail within the item itself. Then this session will 
explain the different options that users have when 
using Custom Actions such as leveraging the 
EditControlBlock and the DisplayFormToolBar as 
well as any tokens that can be used in the Action 
URLs. We will also explore how to tell if a comment 
field is set to append text. 


HCU303: POWERSHELL FOR MOSS 
DEVELOPERS AND ADMINISTRATORS 
MICHAEL BLUMENTHAL 

PowerShell, the ultimate in command shells for 
Windows, exposes all the richness of .NET right at 
the command line! Learn how to use this powerful 
tool for a variety of MOSS configuration, adminis- 


tration, and customization needs. See how easy it 
is to work with the SharePoint object model with- 
out having to dive into Visual Studio! 


HCU101: GETTING DOWN AND DIRTY WITH 
SHAREPOINT BRANDING 

MICHAEL LOTTER 

While working primarily with enterprise clients 
and nobody wanting the out-of-the-box look and 
feel, I've created a new respect for people that do 
SharePoint branding as a career because Гуе had 
to do it a couple of times myself and | truly under- 
stand how complicated it really is. "Getting down 
and dirty with SharePoint branding" is a phrase 
that Гуе come up with after doing some 
SharePoint branding projects with the latest ver- 
sion of SharePoint. How to brand a SharePoint site 
really determines what flavor and templates are 
being used and this is only one of the difficult 
parts of the whole process. This session gets into 
what tools and methods | have used to brand 
SharePoint sites for clients in the past and some 
custom code that | wrote to get past some of the 
roadblocks with the current version. The session 
will touch on CSS, Master Pages, Page Layouts, 
HTTP Handlers, WSP files, Cit and many tools I've 
used to accomplish my tasks. 


HCU304: HOW TO BUILD A "HELLO WORLD" 
SILVERLIGHT WEB PART FOR A SHAREPOINT 
SITE IN 10 EASY STEPS 

PHILLIP WICKLUND 

New to Silverlight? Want to "Jazz" up your 
SharePoint sites and wow the socks off the busi- 
ness? Join this introductory SilverLight 
SharePoint session to learn all the steps to get a 
new Silverlight application deployed into a 
SharePoint environment. It will definitely "light" 
up your day! 


HCU305: DEVELOPMENT IDEAS ON HOW TO 
MAKE YOUR SHAREPOINT ENVIRONMENT 
MORE SOX OR HIPPA COMPLIANT 

PHILLIP WICKLUND 

The СЕ statement "if (SharePoint == Compliant)" 
seems likely not to return "True" any time soon. 
However, there is a lot a developer can do to 
ensure your company's safety. Come see a real- 
world implementation of content types, features, 
event handlers, and workflows that all work 
together to ensure the security and compliance of 
every document in every library in a SharePoint 
farm. Now that's a step in the right direction! 


HCU401: SHAREPOINT WORKFLOW FORMS 
ROBERT L. BOGUE 

Custom SharePoint Workflows can do anything 
they want behind the scenes, interacting with 
other systems, sending e-mails, and updating 
databases but if they need to interact with the 


user, they almost always need a custom workflow 
form. In this session, we'll cover the three most 
popular kinds of Workflow forms. 


HCU402: CUSTOM AUTHENTICATION FOR 
SHAREPOINT 

ROBERT L. BOGUE 

The SharePoint technologies allow you to plug in 
ASP.NET 2.0 authentication providers. You'll find 
plenty of information on how to plug in the SQL 
Server authentication provider to SharePoint-but 
what if you need to write your own? What if you 
need to make SharePoint authenticate against 
your existing applications authentication system- 
and it's something custom you wrote? In this ses- 
sion, you'll learn how to write your own custom 
provider. You'll also get a chance to take away a 
pass-through provider which will log all of the 
communications from your provider and 
SharePoint-allowing you to gain visibility to the 
process and thus develop faster. 


HCU306: COMPARING SHAREPOINT 
DEVELOPMENT METHODOLOGIES 

SCOT HILLIER 

Developers who want to create SharePoint solu- 
tions quickly discover that there are few built-in 
tools in Visual Studio that support SharePoint 
development. While Microsoft offers the Visual 
Studio Extensions for Windows SharePoint 
Services (VSeWSS), this toolset may not always be 
the best choice. In this session, we will present the 
various SharePoint development toolsets and cat- 
alog their strengths and weaknesses. The review 
will include not only VSeWSS, but several commu- 
nity solutions as well. Attendees will exit the ses- 
sion with a strong understanding of the underly- 
ing SharePoint development process and the tools 
available to create solutions. 


HCU403: USING THE BUSINESS DATA 
CATALOG IN OFFICE BUSINESS 
APPLICATIONS 

SCOT HILLIER 

All organizations maintain data inside distinct 
line-of-business (LOB) systems that are required 
to support business processes. This data may be 
contained within a customer relationship manage- 
ment (CRM) system, an accounting system, an 
employee information system, or other similar 
systems. The Business Data Catalog (BDC) can be 
used to access the data in these LOB systems, but 
typically the access is limited to displaying infor- 
mation in Web Parts. Using Office Business 
Applications (0BA) technology, we can integrate 
BDC data with Office clients to support the prepa- 
ration, routing, and archival of business docu- 
ments. Attendees will exit this session with sever- 
al new ideas for integrating LOB data in 
SharePoint solutions. 


HCU404: BUILDING EXCEL SERVICES 
DASHBOARDS 

SCOT HILLIER 

Excel Services Dashboards are at the heart of the 
Business Intelligence story in SharePoint. 
However, the end-user experience in Excel 
Services is often inferior to Excel 2007. In this ses- 
sion, attendees will learn how to consume Web 
services in Microsoft Office Excel 2007 and in 
Excel Services to create similar end user experi- 
ences in both Excel and Excel Services. The cre- 
ation of add-ins for Excel and user-defined func- 
tions for Excel Services will be presented. 
Attendees will exit the session with a complete 
understanding of how to enhance Excel Services 
so that the end user experience more closely 
matches Excel 2007. 


HEC201: DRIVING INFORMATION: 
INFORMATION ARCHITECTURE FOR 
INFORMATION WORKERS 

JOE SHEPHERD 

This session seeks to illuminate the anatomy of a 
solid taxonomy built on SharePoint 2007. 
Attendees will leave with a solid understanding of 
what taxonomy is and what makes it scalable and 
extendable. Participants will look at real-life 
examples of what works and what does not work 
and how to avoid some common mistakes that can 
save time and money months and even years 
down the road. We will establish a basic under- 
standing of the SharePoint architecture and then 
explore how that architecture can be used to cre- 
ate the most effective taxonomy from a physical, 
logical and conceptual perspective. 


HSC401: CREATING A CUSTOM LOGIN FORM 
FOR FORMS-BASED AUTHENTICATION 

JOE SHEPHERD 

This session will show you how to create your own 
login form for use with Forms Based 
Authentication (FBA). We will touch briefly on the 
different parts of FBA and how to configure it. 
Then we will walk through creating a custom 
Login.aspx page that will determine if a user has 
accepted a disclaimer; if not, the form will redirect 
them to the disclaimer and save their selection 
before allowing them to continue. 


HSC201: USING INFORMATION RIGHTS 
MANAGEMENT (IRM) WITH SHAREPOINT 
LEONARD MWANGI 

Distribution of information is one of the major 
problems that exist in different organizations, 
since SharePoint and file servers are meant to 
provide users with information required to 
achieve their day-to-day tasks. But sometimes 
users share information that they shouldn't share. 
This can lead to catastrophic events in an organi- 
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zation if the information gets to the wrong hands. 
These information leaks can lead to a competitor's 
advantage, loss of revenue or copyright issues. In 
this session, we will look into configuring and 
accessing Information Rights Management (IRM) 
in SharePoint and how IRM-enabled documents 
can help protect confidential documents to pre- 
vent intended or unintended security breeches on 
SharePoint documents. 


HSC301: SECURITY FOR SHAREPOINT IN AN 
INSECURE WORLD: EXAMINING METHODS 
AND TECHNOLOGIES TO MITIGATE THREATS 
TO SHAREPOINT 

MICHAEL NOEL 

The collaboration and document management 
capabilities within SharePoint products and tech- 
nologies are robust and can greatly improve func- 
tionality. The nature of the modern workplace in 
many cases requires anytime connectivity to the 
SharePoint platform, not only from within the con- 
fines of a traditional office, but also on the road or 
in the home office. Many organizations are subse- 
quently finding it extremely valuable to expose 
their SharePoint environment to the Internet, but 
are being faced with a myriad of security chal- 
lenges to keep their vital organizational informa- 
tion from being hacked and exposed. This session 
focuses on the risks of exposing SharePoint to the 
Internet and explaining which technologies have 
been proven to mitigate those risks. From secured 
Web publishing using Microsoft's Internet Security 
and Acceleration (ISA) Server or the Internet Access 
Gateway (IAG) product line, to rights management 
protection, to antivirus with ForeFront Security for 
SharePoint, this topic covers a range of security 
concerns and how they can be addressed. 
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SDB301: POWER-TO THE COMMAND-SHELL 
GERT DRAPERS 

Manage your SQL Server installations from the com- 
mand line using Microsoft PowerShell. Learn how to 
leverage the new PowerShell script shell in combina- 
tion with the SQL Server PowerShell provider and 
CmdLets to manage your SQL Server environments 
from within a flexible and powerful scripting environ- 
ment. If you have a need to automate your SQL Server 
management tasks, PowerShell is your new friend! 


SDV302: PROGRAMMING FILESTREAMS 

IN SQL SERVER 2008 

BOB BEAUCHEMIN 

SQL Server 2008 provides a new storage model 
called filestream storage. Using filestream storage, 
a large value (blob) in a table is stored as a file on 
the file system, rather than in the database direct- 
ly. Accessing the blob can be accomplished by 
using Transact-SQL or by using transactionally- 
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consistant, optimizes streaming-style APIs. This 
session covers the aspects of defining and pro- 
gramming filestreams in SQL Server using 
Transact-SQL, ADO.NET, OLE DB, and ODBC. 


SBI203: CREATING A DIGITAL DASHBOARD 
WITH SQL SERVER 2008 

BRIAN LARSON 

Digital dashboards are a popular way to provide 
key performance indicators (KPIs) to decision mak- 
ers. SQL Server 2008 provides the tools necessary 
to create and deliver polished, real-time digital 
dashboards without a large investment in addi- 
tional software. This session will explore the cre- 
ation of KPls in both a relation and an Analysis 
Services environment, methods to display those 
KPIs graphically using Reporting Services. The ses- 
sion will also cover multiple ways to deliver those 
digital dashboards to end users, including integra- 
tion into other applications. 


SDB304: ESSENTIAL DATABASE 
MAINTENANCE 
PAUL S. RANDAL & KIMBERLY L. TRIPP 


In this session, Paul and Kimberly will run you 
through their top-ten database maintenance rec- 
ommendations, with a lot of tips and tricks along 
the way. These are distilled from almost 30 years 
combined experience working with SQL Server 
customers and are geared towards making your 
databases more performant, more available, and 
more easily managed (to save you time!). 
Everything in this session will be practical and 
applicable to a wide variety of databases. Topics 
covered and myths debunked include: backups, 
shrinks, fragmentation, statistics, and much more! 
Focus will be on 2005 but we'll explain some of the 
key differences for 2000 and 2008 as well. 


SDV305: WHAT'S NEW, HARDER, AND 
EASIER IN SQL SERVER 2008 SECURITY? 
DON KIELY 


Each new version of SQL Server has gotten more 
secure and more complex. More secure is better, 
but more complex means that there are likely to be 
whole new ways of attacking it that no one has 
dreamed up yet. During this session, we'll see 
what's new in security and how it makes develop- 
ment easier and harder. Overall your applications 
are likely to more secure, but you'll need to know 
more than ever about security to make it so. 


SDV406: SQL SERVER INTERNALS- 
MEMORY MANAGEMENT 
GERT DRAPERS 


There are three key things to understand when it 
comes to SQL Server scalability and performance: 
execution, 1/0 and memory. This session will take you 
through the internals of SQL Server memory man- 
agement in order to gain the necessary knowledge 
to better understand the underlying SQL Server 


behaviors. Once you understand how SQL Server 
allocates and uses its memory you will increase your 
effectiveness when dealing with performance tuning, 
scaling, and configuration problems. 


508307: SQL SERVER CONSOLIDATION AND 
VIRTUALIZATION 
RONALD YENKO 


With today's more powerful hardware and the 
heat/space issues each new machine creates in 
your machine room, there are many advantages to 
utilizing your hardware to its fullest ability (main- 
ly, cost savings). Rather than having many of those 
machines spending most of their time converting 
electricity into fan noise, we'll look at two cost-sav- 
ing approaches-consolidating databases together 
on instances/machines and virtualization with SQL 
Server. You need to look carefully before leaping to 
avoid performance pitfalls associated with blindly 
grouping different applications on the same hard- 
ware. We'll go through techniques that will help 
you find a balance of acceptable performance at 
the most effective cost. 


SDV308: SQL SERVER 2005/2008 
INDEXING FOR PERFORMANCE 
KIMBERLY L. TRIPP 


Creating indexes to improve specific types of 
queries can be challenging-there are tools that 
can help (i.e, Database Engine Tuning Advisor, 
DMVs, Performance Dashboard) but without a com- 
prehensive workload or an understanding of the 
internals, you could make the wrong decision (and 
end up with a wider than necessary index or too 
many indexes). This session will give you a series 
of steps to use to tune various search arguments, 
joins and aggregations, as well as show you how to 
compare the different options and determine 
what's really working! If you're a developer trying 
to create more scalable databases or you're an 
admin trying to tune existing and known problem 
queries, then this session is for you! 


SBI209: PERFORMANCEPOINT SERVER 
2007 101 
CRAIG UTLEY 


Are you interested in PerformancePoint Server 
2007 but dont know where to start? 
PerformancePoint Server 2007 is Microsoft's new 
business intelligence (ВІ) tool that focuses on 
three major areas: Monitoring, Analytics, and 
Planning. This session provides an overview of 
PerformancePoint Server by showing examples of 
all three areas. See how to build scorecards using 
the Monitoring server, create reports and integrate 
ProClarity in the analytics portion, and examine 
the Planning server. If your organization has 
already built a warehouse or is thinking about it, 
see how Microsoft's newest ВІ product enables 
delivery of data to a variety of users. 


Attend Microsoft ASP.NET, Visual Studio & .NET, or 
SharePoint Connections and attend the sessions of 
the SQL Server Connections conference for FREE! 


SDB310: CORRUPTION SURVIVAL 
TECHNIQUES 
PAUL S. RANDAL 


Your database is corrupt-what do you do? Well, it 
depends! How critical is the data? Do you know 
what's really wrong with the database? What does 
all that DBCC CHECKDB output mean? Should you 
restore or repair? It's all about limiting downtime 
and data-loss when a corruption occurs-from 
knowing the tools to understanding the implica- 
tions of choices you make. In this demo-heavy ses- 
sion, Paul will give you insight into how to recover 
from corruption without making things worse. 
Most importantly you'll get step-by-step instruc- 
tions for dealing with the more common scenarios. 


SDV311: BEST PRACTICES FOR EXCEPTION 
HANDLING AND DEFENSIVE PROGRAMMING 
IN SQL SERVER 2005 AND 2008 

ADAM MACHANIC 


As developers, we sometimes become lax about 
dealing with error and exception conditions by the 
time our code gets down to the data level. 
Exceptions can feel like something that only appli- 
cation code needs to worry about, until you realize 
that in SQL Server they can have a tremendous 
effect on your transactions and your data integrity. 
Learning to properly handle them is, therefore, of 
paramount importance to those of us who write 
data-centric applications. SQL Server 2005 greatly 
improved exception handling options by adding sup- 
port for the structured TRY/CATCH syntax, but there 
is a lot more to the story than just that feature. In 
this session, we delve into the ins and outs of excep- 
tions in both SQL Server 2005 and SQL Server 2008, 
starting with the database engine itself: types of 
exceptions, when and why they're thrown, and how 
the server treats them. Next, learn how to configure 
and throw your own custom exceptions, as well as 
how to leverage the SQL Server exceptions infra- 
structure with a variety of exception handling and 
defensive programming techniques both with and 
without the TRY/CATCH syntax. Most importantly, we 
review the effect of exceptions on transactions and 
how to take programmatic control over the outcome 
of your transactions in the face of an exception. 


SDV212: ADO.NET 3.5 SP1 FOR SQL SERVER 
APPLICATIONS DEVELOPERS 

WILLIAM R. VAUGHN 

This session is designed to help developers who 
have installed Visual Studio SP1 understand what 
features have been enabled for the first time and 
re-acquaint them with the list of changes that can 
impact their applications, new and deployed. Visual 
Studio leverages some of this innovation directly 
with the Local Data Cache classes as well as inte- 
grating LINQ (as implemented by ADO.NET 3.5). 
While this session does not focus on LINQ or the 
Entity Framework (as there are several others that 


do), it does focus on synchronization architecture, 
design and implementation-especially as imple- 
mented by the new Synchronization Services class- 
es. We'll also focus on a number of specific SQL 
Server 2008 features that couple with sync servic- 
es as well as the new data types and how your code 
is affected. These include Table-value parameters 
(how do you pass them from an application to a SP 
and why would you want to?), the new date and 
time types, the new FileStream "type", as well as an 
overview of the other new types that you might find 
useful in a new design or have to deal with in the 
future. We'll also discuss the new RDL and RDLC 
report rendering engine and how to leverage this 
new technology to manage displayed data. 


SDB413: AUTOMATING DATABASE 
DEPLOYMENT 
GERT DRAPERS 


Do you have a need to automate the deployment of 
your database schema? Learn how to leverage 
DBSCHEMA files in combination with the command 
line VSDBCMD.EXE deployment engine. The latest 
Visual Studio 2008 Team System Database Edition 
СОК release provides a redistributable deployment 
engine that allows you to create a database 
deployment unit, which you can integrate in to 
your own "database setup". 


SDV314: PRACTICAL SQL SERVER SECURITY 
FOR ARCHITECTS AND DEVELOPERS 
BOB BEAUCHEMIN 


SQL Server security works within the framework of 
Windows security. In addition, SQL Server adds its 
own security objects such as logins, roles, users, 
application roles, encryption keys, and more. 
Knowing how SQL Server security concepts map to 
Windows and how you integrate the SQL Server- 
specific objects like databases, schemas, and exter- 
nal programs is critical to your application design 
and implementation. This session will also focus on 
the SQL Server 2005-2008 security enhancements 
that can make or break a project design. 


SBI315: WHY DATA WAREHOUSING PROJECTS 
FAIL (AND WHAT YOU CAN DO ABOUT IT) 
CRAIG UTLEY 


Is your organization planning to build a data ware- 
house or BI solution? Data warehousing projects, like 
many large IT projects, have high failure rates. While 
the exact rate of failure for data warehousing proj- 
ects is difficult to pin down, the causes of these fail- 
ures fall into a small number of categories. It is obvi- 
ously possible to successfully complete a data ware- 
housing project and deliver value to the business. 
Craig Utley has seen Microsoft ВІ solutions in various 
states of completeness at over 30 companies world- 
wide and has seen some awesome successes and 
some spectacular failures. This session addresses 
the reasons data warehousing projects fail and how 
you can succeed in overcoming these obstacles. 
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SDB316: SCRIPTING SQL SERVER 2008 
POLICIES AND DATA COLLECTION WITH 
POWERSHELL AND SMO 

BOB BEAUCHEMIN 


SQL Server 2008 comes with a built-in shell-based 
programming model for new as well as old adminis- 
trative tasks. In this session we'll explore implement- 
ing scripts to implement SQL Server Policy Based 
Management, Data Collection, Network Configuration, 
and other tasks. The scripts use the new PowerShell 
provider for SQL Server, which makes it possible to 
deploy to a group of servers with a single script. 


SDV417: ROLL YOUR OWN DATADUDE RULES 
GERT DRAPERS 


Learn how to extend T-SQL Static Code Analysis by 
writing your own rules! Static code analysis allows 
you to enforce your own rules in the context of 
your own SQL Server schema. Now you can extend 
the existing rule set with your own set of rules, by 
implementing some .NET classes. 


SDB318: CLUSTERING IN SQL SERVER 
RONALD YENKO 


Have you always wanted to set up a high availability 
SQL Server cluster but thought it was too expensive 
or complicated? In this session, we'll take a look at 
where clustering makes sense (and maybe where 
another approach might fit better). We'll go through 
a methodology on how to design and set up a cluster 
(from the relatively economical to mega-powerful). 
The session will include gotchas and workarounds 
for smoothly clustering SQL Server Integration 
Services. We'll also cover some tips & tricks that will 
keep your clusters running smoothly without con- 
stant attention from you. The session will focus on 
SQL Server 2008 functionality, but a majority of the 
features are available in previous versions. 


SDB319: SQL SERVER 2008 EXTENDED 
EVENTS: PERFORMANCE PROFILING AND 
TROUBLESHOOTING TECHNIQUES 

ADAM MACHANIC 


Extended Events (X/Events), SQL Server 20085 pow- 
erful new tracing infrastructure, opens the door to 
performance tuning and troubleshooting tech- 
niques that SQL Server DBAs used to only dream 
about. Imagine tracking and aggregating wait sta- 
tistics at the session- level rather than the server 
level. Imagine seeing exactly how long each step in 
your query took and figuring out the real cost of 
that index scan. Imagine capturing an exception 
with an associated callstack-no more guessing 
about exactly what component failed and why. When 
you're done imagining, open your eyes and attend 
this session, where you will learn all of these tech- 
niques and more. Designed for DBAs and developers 
who already understand the basics of X/Events, this 
session will go from 0 to 60 in the first few minutes. 
You will see a number of code examples and gain an 
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understanding of how to maximize X/Events for per- 
formance profiling and troubleshooting purposes. If 
you are serious about making your SQL Servers fly, 
this is one session not to be missed. 


SDV320: SQL SERVER 2008 SPARSE 
COLUMNS AND FILTERED INDEXES 
KIMBERLY L. TRIPP 

Creating an extensible schema-extensible in terms of 
additional properties for a given item-usually 
requires a design change such as adding new rows to 
a name/value pairs table, using XML or a BLOB to 
store the column set, or just giving up on allowing 
extensibility. SQL Server 2008 offers a new feature 
called sparse columns aimed at allowing easy exten- 
sibility. However, as the maximum number of columns 
in a table is now 30000, this feature also seems to 
allow poor schema design! In this session, Kimberly 
Will explain how sparse columns work and when it 
makes sense to use them in an extensible schema. In 
addition, Kimberly will explain how the complimenta- 
ry filtered indexes feature can provide an ideal index- 
ing strategy for sparse columns which allows this 
seemingly poor design to shine (and perform!). 


SBI321: USING DATA MINING TO IMPROVE 
SQL SERVER 2008 INTEGRATION 
SERVICES DATA LOADS 

BRIAN LARSON 

SQL Server 2008 provides a powerful data mining 
environment. These data mining tools can be used 
to assist with the data cleansing and data valida- 
tion process during extract, transform, and load 
process. Let the data tell you which items might be 
invalid. Only load those records that are most like- 
ly to fit your requirements or result in sales. 
Prevent unwanted data from reaching your data- 
base, rather than trying to weed it out later. 


SDB322: FOLLOW-THE-RABBIT: INTERACTIVE 
Q&A ON DATABASE MAINTENANCE 

PAUL S. RANDAL AND 

KIMBERLY L. TRIPP 

If there's something you want to know about 
Database Maintenance, we've got the answer for 
you! During the week there have been sessions on 
many aspects of database maintenance, but 
maybe YOUR question hasn't been answered. So, 
bring along your questions as we discuss the ins 
and outs of keeping a database healthy. This ses- 
sion might not seem as structured as other ses- 
sions, but you'll be surprised at how informative 
and fun it is! This follows straight on from the DBCC 
CHECKDB session, plus open lunchtime Q&A-we've 
had such great success with these Q&A session 
that we want to maximize your time in them. 


SDV423: ADVANCED SQLCLR: SECURITY 
BEST PRACTICES AND DESIGN FOR REUSE 
ADAM MACHANIC 

SQL Server 2005 CLR integration is a powerful tool in 
the database developer's toolbox, allowing database 
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code to utilize all that the .NET Framework offers. But 
with this power comes a variety of new challenges. 
Security, reliability, and modularization are all han- 
dled differently in SQLCLR than in T-SQL, and some- 
times can be tough to deal with in the new environ- 
ment. This session describes the issues at hand and 
explores the interplay between SQL Server, SQLCLR, 
and .NET. You'll learn how to leverage the SQLCLR 
Security model in order to maximize your code's 
potential for reuse, all while minimizing the amount 
of work needed to program quality SQLCLR routines. 


SBI324: AVOIDING COMMON ANALYSIS 
SERVICES MISTAKES 
CRAIG UTLEY 


Are you concerned that the cubes you are planning to 
build, or that you have already built, are not perform- 
ing at peak speeds or don't give users the best ana- 
lytic experience? As business intelligence (Bl) grows 
in popularity and client tools become more powerful, 
more and more organizations are building data marts 
and data warehouses with SQL Server Analysis 
Services. Unfortunately, many companies new to BI 
with SSAS make the same mistakes over and over 
without realizing it. Craig Utley has seen Microsoft В! 
solutions at over 30 companies worldwide and has 
helped them overcome design and implementation 
issues. This session examines the common problems 
with the design of Analysis Services cubes and В! 
solutions on the Microsoft platform and gives practi- 
cal advice on how to resolve these issues. 


SDB225: TIPS AND TRICKS FOR 
UPGRADING TO SQL SERVER 2008 
RONALD YENKO 

Many organizations are still in the process of 
upgrading from SQL Server 2000 to 2005. When 
looking at going to SQL Server 2008, you may have 
a decision to make-upgrade directly from SQL 
2000 to SQL 2008-or-upgrade to SQL 2005 first, 
and then to 2008. In this session, we'll look at fac- 
tors such as incompatibility issues (e.g. deprecated 
functionality, security models, etc.), choosing the 
appropriate upgrade mechanism, and rollback 
planning. These can help you chose the best 
upgrade path for your organization. Like so many 
other things in life, timing is everything. A little 
strategic evaluation and planning on your part 
could result in a 2-for-1 upgrade process-saving 
you both time and money. It could also result in 
you saving your company from a costly situation in 
attempting to upgrade to a version your environ- 
ment for which it is not ready. Most of the evalua- 
tions and processes would also apply to a SQL 
2005 to SQL 2008 migration. 


SDV226: MANAGEMENT STUDIO 2.0: TIPS, 
TRICKS, TRAPS, AND TREATS 

DON KIELY 

The SQL Server 2008 story isn't really about pro- 
ductivity, but the latest version of Management 


Studio has definitely come of age. There are all 
kinds of tools and useful information throughout 
the environment, masking the complexity of and 
sometimes enhancing the underlying database 
server features. During this session we'll shine a 
light into the various nooks and crannies of this 
useful tool for both developers and administrators. 
You'll learn about the new activity monitor, 
Intellisense (and how to keep it from driving you 
nuts, particularly if you are used to Visual Studio), 
T-SQL debugging, object explorer details enhance- 
ments, and lots more. You'll learn various tips and 
tricks to make the most out of this tool. 


581327: А REPORTING SERVICES 
ENVIRONMENT WITHOUT THE 

REPORT SERVER 

BRIAN LARSON 

The Report Viewer control offers the ability to ren- 
der local reports without the aid of a report serv- 
er. This session will demonstrate how, with some 
additional code, the Report Viewer control can be 
turned into a flexible report management environ- 
ment, similar to the Report Manager, all running 
local within an application. Use a report's RDL file 
to determine data sources, dataset queries, and 
report parameters and then dynamically create all 
of the structures necessary to execute a report. 


ABOUT DATABASE DEVELOPMENT 


GUI TO T-SQL: WHAT GOES ON BEHIND 
THE SCENE? 


SHOULD | UPGRADE TO SQL SERVER 
2008? 


THE FORCED DBA 


THE SQL SERVER 2008 PERFORMANCE 
DATA COLLECTOR: ADVANCED TOPICS 


BUSINESS INTELLIGENCE 
PERFORMANCE METRICS: USING TOOLS 
TO UNDERSTAND THE PERFORMANCE OF 
BI SOLUTIONS 


OUT OF THE BOX BI: USING BUSINESS 
INTELLIGENCE SOLUTIONS IN NEW AND 
EXCITING WAYS 


NORDIC-NEW OBJECT RELATIONAL 
DATABASE DESIGN 


SMART DATABASE DESIGN 
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SPR301: PRACTICAL SQL SERVER SECURITY FOR ARCHITECTS AND 
DEVELOPERS 


BOB BEAUCHEMIN 


SQL Server security works within the framework of Windows security. In addition, 
SQL Server adds its own security objects such as logins, roles, users, application 
roles, encryption keys, and more. Knowing how SQL Server security concepts 
map to Windows and how you integrate the SQL Server-specific objects like data- 
bases, schemas, and external programs is critical to your application design and 
implementation. This workshop will also focus on the SQL Server 2005-2008 
security enhancements that can make or break a project design. 
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HPE301: PLANNING, DESIGNING AND CUSTOMIZING 
SEARCH CENTERS 


DANIEL WEBSTER 


Whether you are using Windows SharePoint Services 3.0, Microsoft Search 
Server 2008 or SharePoint Server 2007, effective and efficient searches will 
require considerable planning, designing and customization to meet the var- 
ied business needs of your users. SharePoint Server 2007 certainly makes 
customizations easier, but they are certainly possible in all three products. In 
most organizations, every business unit will have different search require- 
ments. Achieving the goal of meeting their business needs while maintaining 
consistency in your search environment may seem an impossible task. It is 
not impossible but will require major planning before implementation. 


Search is not a "build it and they will come" scenario. A successful search plat- 
form not only requires a design that meets what both you and your users think 
their needs are, but also requires maintenance, review, and constant tweaking 
in our ever-changing world. We will be working with the Infrastructure Update 
additions to the Search platform including Federated Search. 


This topic is much too broad to be covered in six hours... maybe in six days. 
This workshop will get you started in the process and will send you home with 
an outline for action. Be prepared to completely rethink your search design, 
ask questions, and take copious notes. 
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PRE-CONFERENCE WORKSHOP > 9AM-4PM 

DEVELOPING FOR WINDOWS POWERSHELL: THE COMPLETE STORY 
(BRING YOUR OWN LAPTOP) 

DON JONES 


Ready to make your application's management and administration accessible 
through Windows PowerShell? Ready to build applications that can be man- 
aged from the command-line and a GUI with practically no extra effort? Ready 
to make your applications part of automated business processes - including 
scenarios you can't even foresee? In this in-depth workshop, you'll see exactly 
how to do it all using Visual Studio and either СЕ or VB. You'll see how to build 
Windows PowerShell cmdlets from scratch, embedding within them the busi- 
ness and administrative logic needed to manage your apps. You'll learn how to 


Workshops and speakers are subject 
to change. See Web site for the most 
current description and availability. 


leverage PowerShell's extensible type system to expose additional information. 
You'll learn to create default formatting views, help files, and other adjuncts to 
help IT pros manage your app more effectively. Best yet, you'll learn about the 
patterns and practices that PowerShell enables for systems administrators, 
and come to understand exactly how administrators will use PowerShell to 
manage your app. Finally, you'll learn how to leverage the cmdlets you've writ- 
ten to quickly create graphical administrative consoles that require minimal 
additional effort, and are largely de-coupled from the application logic (mak- 
ing the GUI easier to create and maintain). As a bonus, you'll also learn how to 
leverage PowerShell as a sort of ".NET Immediate Window" for quickly testing 
and prototyping code. Your instructor, Don Jones, is a Windows PowerShell 
MVP, co-author of the first published book on Windows PowerShell, and a 
PowerShell trainer with more than three years of experience. You'll be able to 
obtain all completed code templates and code samples after the session; bring 
your own laptop running Visual Studio (Express editions are fine) to partici- 
pate in do-it-yourself and follow-along examples - you'll leave with a complete 
PowerShell solution right on your laptop! 


PRE-CONFERENCE WORKSHOPS * MARCH 22, 2009 
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PRE-CONFERENCE WORKSHOP > 9AM-4PM 
APR201: SILVERLIGHT 2 DEVELOPMENT WORKSHOP 
DAN WAHLIN 


Silverlight 2 provides a powerful framework for building Rich Internet 
Applications (RIAs) that capture the attention of end users. In this workshop, 
Dan Wahlin (author of Professional Silverlight for ASP.NET Developers) will 
discuss Silverlight 2 technologies including language features, built-in con- 
trols, control templates, styles, networking features, animations, data binding, 
and more. Learn to build engaging applications using the latest client-side 
technology. If you're looking to get up-to-speed quickly on Silverlight, this is 
a workshop you'll want to attend. 
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SPR302: SQL SERVER 2005/2008 INDEXES FROM EVERY ANGLE 
-INTERNALS, STATISTICS AND FRAGMENTATION 


PAUL S. RANDAL AND KIMBERLY L. TRIPP 


Most people understand their table structures and even their user require- 
ments (to a point); however, sometimes the key to optimization is in how the 
System chooses to store and execute the request. By understanding how SQL 
Server stores your data as well as how the optimizer chooses an index, you will 
be better equipped to create the right structures (and not over or under index) 
as well as keep them more optimal. This intense, full-day workshop will cover 
index internals (in terms of how your relational data is stored), statistics (in 
terms of how to provide the best information to allow your query requests to 
be optimized), and fragmentation (in terms of the costs and benefits of a well- 
managed system). If you're a developer trying to create more scalable databas- 
es, or you're an admin trying to tune an existing system, and you've always 
wondered why and how SQL Server works, then this workshop is for you! 

NOTE: The post-conference workshop has minimal to no overlap with this pre- 
conference workshop. In fact, these two workshops go very well together and 
provide a more comprehensive approach to performance tuning. 


NOTE: LUNCH IS INCLUDED WITH FULL DAY WORKSHOPS + THE COST OF A WORKSHOP IS IN ADDITION ТО THE REGULAR CONFERENCE FEE 
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MICROSOFT TECHNOLOGY ROADMAP 
MICHELE LEROUX BUSTAMANTE 


With these rapidly changing times, developers have a lot more on their mind 
and on their plate than they did at any point in recent time. Although Visual 
Studio and the .NET Framework both provide tools that yield an overall 
increase in productivity during the development cycle, the avalanche of tech- 
nologies that builds upon these foundations can seem overwhelming if not 
insurmountable at times. This workshop will take you through a guided tour 


of the Microsoft technologies available today, tomorrow, and into the foresee- 


able future...and enable educated decisions on aligning your product road 
map with upcoming technologies. We'll discuss language and platform trends 
for .NET 2.0 through .NET 4.0 including language trends for СЕ 3.0 and Visual 
Basic 9.0; advances for developing the data access tier from data sets and 
readers to ADO.NET 3.5 features including LINQ and the Entity Framework; 
Windows client development with WPF and the relevance of Windows Forms 
and ClickOnce; Web development with ASP.NET, AJAX and Silverlight; the evo- 
lution of communication stacks from ASMX, Remoting, and Enterprise 
Services to WCF, and continued enhancements to WCF; perspectives on work- 
flow and BPM; the impact Oslo will have on the future of Microsoft develop- 
ment; a review of identity platforms including Cardspace, Geneva, and Zurich; 
and the direction of cloud computing with Windows Azure and the Azure 
Services Platform. In this intense, one-day briefing, you will see numerous 
demonstrations of these technologies, you will assess the benefits and 
advantages of the forward trends and you will gain an overall picture of each 
technology's place in your development efforts today and tomorrow-for each 
respective discipline. Developers, architects, and technical leads who would 
like to gain some perspective on the Microsoft road map, the applicability of 
each technology, and the choices and the trade-offs will greatly benefit from 
this workshop. 


PRE-CONFERENCE WORKSHOP > 9AM-4PM 
WINDOWS WORKFLOW IN DAY 
KATHLEEN DOLLARD 


You've heard about Windows Workflow Foundation, but no one's shown you 
how to implement it for your applications. This workshop starts with an 
overview of Windows Workflow and why it's likely to become a key part of 
your development strategy. You'll watch the creation of a complex sequential 
workflow integrating human and computer-based actions. Then you'll see a 
similar problem solved using a state machine workflow. Each workflow 
includes standard Windows Workflow tasks, custom tasks, and rule-based 
decisions. You'll see interactions with things outside the workflow-including 
notifying people and other systems, handling events, and implementing data 
exchange services. The workflow becomes more sophisticated as it integrates 
with the Visual Studio 2008 features that integrate with WCF. Workflows don't 
just handle process-they also manage the grimy details of robust systems- 
transactions and compensation, tracing, status reporting, and exception man- 
agement. You'll see how to implement these details and understand the role 
of the host in providing necessary services. Before closing we'll circle back 
around to designing workflows. Workflow design presents new challenges to 
developers, particularly since you can share this design experience with 
power end users-actually letting them design portions of the workflow. In 
this workshop, you'll learn how to recognize good workflow candidates, make 
decisions on workflow granularity, determine how to share design responsi- 
bilities, and implement workflow details. 


” A 


PRE-CONFERENCE WORKSHOP > 9AM-4PM 


5 COMPANIES, 5 PROBLEMS, 5 SOLUTIONS: TEAM SYSTEM IN THE 
REAL WORLD 


JEFF LEVINSON AND STEVE BORG 


This pre-conference workshop is designed to provide practical and imple- 
mentable ways to attack five common issues that plague development organ- 
izations today. Five companies with five different problems leveraged Visual 
Studio Team System to make it work harder and smarter for them, solving 
real business problems and improving their Team System return on invest- 
ment. During this workshop, we will delve into real business problems of real 
organizations and see how Team System made practical solutions happen. 
With each example, we will explore the root cause, identify the possible solu- 
tion, and demonstrate the implementation that solved the problem. 

Sounds great, but how can you be sure this workshop will cover practical and 
implementable VSTS solutions that address our business problem? During 
this session, we will also look at possible solutions to related problems pro- 
vided to us by attendees prior to the pre-conference presentation. Early reg- 
istrants can submit more details on their software development or Team 
System problems. Send your problems to devconnections@nwcadence.com 
and we may incorporate your submission into our presentation! 


PRE-CONFERENCE WORKSHOP > 9AM-4PM 
HPR401: ALL ABOUT SHAREPOINT WORKFLOWS 
ROBERT L. BOGUE 


SharePoint Workflows are a powerful addition to the platform. From the out- 
of-the-box workflows that ship with WSS and MOSS to SharePoint Designer 
workflows to Visual Studio-developed workflows there are an array of options 
for adding workflow to your SharePoint solutions. In this workshop, we'll walk 
you through a ground up understanding of Workflow. Starting with the out-of- 
the-box workflows, you'll see how they're used and what their limitations are. 
You'll learn how users can create their own workflows with SharePoint 
Designer and why you need to be careful about when you let them do that. 
From there we'll develop our own workflows in Visual Studio including the 
creation of tasks, the addition of association and instantiation forms, a task 
edit form, and even how to develop your own custom activity. In this jam- 
packed workshop, you'll get everything you need to move from novice to 
expert in SharePoint workflow-all in one day. This is a highly technical ses- 
sion for developers who want to do workflow. 
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APRS201: BUILDING AN ASP.NET MVC APPLICATION FROM START 
TO FINISH 


STEPHEN WALTHER 


In this full-day workshop, Stephen Walther introduces you to the Microsoft 
ASP.NET MVC Framework by building an entire ASP.NET MVC application from 
start to finish. If you are new to the ASP.NET Framework then this session is a 
great introduction to ASP.NET MVC. During this session, you learn how to take 
advantage of test-driven development when building an ASP.NET MVC applica- 
tion. You also learn how to take advantage of formal software design princi- 
ples and patterns to build software that can survive the test of time. 


NOTE: LUNCH IS INCLUDED WITH FULL DAY WORKSHOPS + THE COST OF A WORKSHOP IS IN ADDITION TO THE REGULAR CONFERENCE FEE 
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SPS303: SQL SERVER 2005/2008 INDEXES FROM EVERY ANGLE 
-АКЕ YOUR INDEXING STRATEGIES WORKING? 


PAUL S. RANDAL AND KIMBERLY L. TRIPP 


Based on a former (and very popular) session of only 75 minutes, this full-day 
workshop expands the many topics related to whether or not you've indexed 
properly. This intense workshop dives deeply into assessing your current 
indexing strategies as well as provides solutions for improving performance 
based on your existing workload. This seminar focuses on three primary 
steps: remove/prune any unused indexes before doing anything else; verify 
the health of the existing (and useful) indexes; add additional/missing indexes 
to improve poorly performing queries/workloads; and exceptions to under- 
stand/consider. We will look at DMVs, Performance Dashboard (SQL Server 
2005 SP2), Performance Data Collection (SQL Server 2008), Extended Events, 
and many aspects of workload analysis. If you're a developer who is perform- 
ing workload tests or an administrator/operator trying to tune an existing 
system, then this workshop is for you! 

NOTE: The pre-conference workshop is not required to attend this post-con- 
ference workshop, however, there's also minimal to no overlap. These two 
workshops go very well together and provide a more comprehensive 
approach to performance tuning. 
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POST-CONFERENCE WORKSHOP > 9AM-4PM 
SERVICE-ORIENTATION, WCF AND YOU 
JUVAL LOWY 


Contrary to common wisdom, service-orientation is not just for high-end appli- 
cations. Every application should be service-oriented, and Windows 
Communication Framework (WCF) is the .NET runtime for developing, deploying 
and consuming service-oriented applications. But what is service-orientation 
really about? What does it mean for mere developers? Is there substance 
behind the hype? In this comprehensive one-day seminar, Juval will first demys- 
tify service-orientation for you, and introduce the basic motivation for service- 
oriented applications and their operating principal and concepts. In that light, 
Juval will then describe what WCF is and how it is designed, and demonstrate 
its advantages over traditional .NET programming. You will see that WCF is 

more than just the next generation platform for building connected systems. In 
many respects, WCF is the next development platform for Windows applications, 
providing system features that are presently crafted by hand on top of .NET and 
Windows. With WCF, every class automatically benefits from these system fea- 
tures, from security to transactions to tracing and logging and much more. To 
maximize the use of these off-the-shelf plumbing aspects you should push the 
service boundary down into your system, but taken to its ultimate conclusion - 
should every class be a WCF services? And what about performance? The work- 
shop will next demonstrate the power and productivity of WCF, contrasting WCF 
used granularly on every class with classic .NET in terms of performance, 
throughput and scalability, and will substantiate the provocative claim that 
every class can and should be a service. Don't miss on this unique opportunity 
to understand SOA and WCF from Juval Lowy who has been part of the strategic 
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design effort for WCF from the beginning, and who offers a profound insight on 
the methodology, the technology and its application. 


-7 SHAREPOINT WORKSHOP 
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HPS301: BUILDING MOSS PUBLISHING SITES 

DOUG WARE 

When Microsoft added Web Content Management features to SharePoint, they 
really created something special. Out of the box, Microsoft Office SharePoint 
Server includes two publishing portal definitions that you can use to create 
your own publishing sites, but the real power comes from taking the 
SharePoint features that the built-in site definitions use and incorporating 
them into your own custom branded publishing sites. 

This workshop starts with an overview of SharePoint publishing from the per- 
spective of an end-user. From there it takes you under the covers and decon- 
structs the base feature set to show you how to leverage the individual 
pieces and create your own sites. Along the way, you will learn how the fea- 
tures support branding, how to customize the authoring experience, and how 
(and more importantly where) to deploy your site's assets. 

By the time you complete this workshop you will understand how to imple- 
ment sites that face the Internet with a branded look and feel so that your 
visitors will never know they are looking at a SharePoint site and you'll also 
understand how to configure the same site to support the creators and man- 
agers of content in your organization. 


You will learn: 

ШЕ How to create a publishing site and pages 

ШЕ How to configure the publishing infrastructure 

Wi To leverage master pages and style sheets using the publishing features 
ШЕ How to create publishing site definitions 

ШЕ How to separate content and layout with content types and page layouts 


Wi How to incorporate SharePoint Designer branding assets into Visual 
Studio solutions 


INETA COMMUNITY ZONE: 


Join your peers in the INETA Community Zone, 


the place to interact with others, discuss what 
you've seen, or just simply have place to sit 
down and recharge. Come participate in the 


conversation of community! 


WORKSHOPS AND SPEAKERS ARE SUBJECT TO CHANGE. 
SEE WEB SITE FOR THE MOST CURRENT DESCRIPTION AND AVAILABILITY. 
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Jom we iw 
ORLANDO, FL 


JW MARRIOTT & RITZ CARLTON 


HOTEL ACCOMMODATIONS 
The JW Marriott Orlando, 4040 Central Florida Pkwy 
Orlando, FL 32837, is the conference site and host hotel. 
SPACE IS LIMITED so reserve your room early by calling the 
conference hotline at 800-438-6720 or 203-268-3204. 


cans 
AIRLINE 
Please call Pericas Travel at 203-562-6668 for airline reservations. 


CAR RENTAL 
Hertz is offering auto rental discounts to attendees. Call the Hertz 
Meeting Desk at 800-654-2240 for reservations and refer to code 
СМЕ 01080038 to receive your attendee discount. 


TAX DEDUCTION 
Your attendance to a 
DevConnections conference 
may be tax deductible. Visit 
www.irs.ustreas.gov. Look for 
topic 513 - Educational Expenses. 
You may be able to deduct the 
conference fee if you undertake 
to (1) maintain or improve skills 


AIRPORT SHUTTLE 
Mears Transportation is the designated ground carrier at Orlando 
International Airport. The shuttle may be picked up at Level 1 of the 
airport. The shuttle is available 24 hours a day. You may call Mears 
directly at 407-843-2404 for more information or go to their Web 
Site www.mearstransportation.com. 


required in your present job; (2) 
fulfill an employment condition 
mandated by your employer to 

keep your salary, status, or job. 


EXTEND YOUR STAY 
Come early or stay late. Bring the family! You are in the land of fantasy for 
children of all ages. Walt Disney World - Magic Kingdom? Park, Disney MGM 
Studios®, Epcot® and Disney's Animal Kingdom? Theme Park. In addition, 


explore Kennedy Space Center, Sea World, and Universal Studios Theme 
GROUP DISCOUNT Park, or take a short drive to beautiful white-sand Atlantic beaches. 
Register individuals from one 
company at the same time and 


receive a group discount. 


ATTIRE 
The recommended dress for the conference is casual and comfortable. 
Please bring along a sweater or jacket, as the ballrooms can get cool 


1-3 registrants $1,495 per person with the hotel's air conditioning. 
Additional registrants | $1,295 per person 
atten etd (5200 о each) SPONSORSHIP/EXHIBIT INFORMATION 
(4th, 5th, 6th...) ME Е 
For sponsorship information, contact: Rod Dunlap 


Call 800-438-6720 to take advantage 
of group discount pricing. 


phone: 480-917-3527 * e-mail: rod@devconnections.com 
See Web site for more details. www.DevConnections.com 


Notes & Policies: The Conference Producers reserve the right to cancel the conference by refunding the registration fee. Producers can substitute speakers and topics and cancel sessions without notice or obligation. Up- 
dates will be posted on our Web site at www.DevConnections.com. Tape recording, photography is not allowed at any session. Conference producers will be taking candid pictures of events and reserve the right to reproduce. 
By attending this conference you agree to this policy. You may transfer this registration to a colleague. Please inform us if you have any special needs or dietary restrictions when you register. Microsoft ASP.NET and Visual 
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Do all functions affected by the presence 
of NULL in the SQL Server database truly 
propagate in a SQL Server environment? 
Not really. T-SQL has extensions that cir- 
cumvent NULL, letting you sum a column 
and get a result, even when the column con- 
tains NULL. If you run the code in callout 
G and click the Messages tab, you'll see that 
SQL Server throws the message “ Warning: 
Null value is eliminated by an aggregate or 
other SET operation." 

You can have a NULL foreign key in a 
fact table, but it'll never be included in the 
output of an EQUI-JOIN operation, simply 
because NULL can’t equal NULL (an 
unknown cannot equal another unknown). 
If you try to join the NULL foreign key 
from the fact table to а NULL column in a 
dimension, then the comparison evaluates 
to false, and the row that contains NULL 
isn't returned, as you'll see when you run 
the code in callout H. 

What if the NULL foreign key wasn't 
intentional? What if it was one of those 
rows that went through the ETL process 
and somehow the foreign key was either cor- 
rupted or destroyed, so that where once there 
was a valid parent-child relationship, today 
theres nothing. There's no pkey-fkey asso- 
ciation between the dimension and the fact 
table. Is there any way around this? The short 
answer is yes. In the dimension you can create 
a special “unknown member” row with a 
dimension key value of -1 and assign as 
many of the attribute columns a value of an 
empty string as you can, as shown in callout 
I. Гуе commented out the SET IDENTITY 
INSERT commands, because my little test 
table doesn’t have an identity column. Let 
these commented-out commands serve as a 
reminder when youre using this technique 
on your production systems. Do a replace- 
ment in the fact table, substituting -1 for any 
NULL foreign key that’s associated with the 
dimension you just altered, as I did in callout 
J. Then join the two tables, using the code 
in callout К. Now you'll be able to join the 
affected rows without having to compromise 
your ANSI-compliant database. 


NULL—Not a Good Idea 


NULL IN THE DATA WAREHOUSE 


LISTING 1: NULL Test Code 


/* code listing 1 */ 
drop table NULLtest 
GO 


drop table NULLtest2 
GO 


/* 1A: create the tables */ 
create table NULLtest ( 


colA int null, 
colB nvarchar (19) null) 
GO 
create table NULLtest2 ( 
СОТА int null, 
со1В int null, 
colC nvarchar (19) null) 
GO 


(B) /* 1B: load the tables */ 
insert into NULLtest values (1, "ааааа"); 
insert into NULLtest values (2, 'bbbbb'); 
insert into NULLtest values (NULL, 'ccccc'); 


insert into NULLtest2 values (1, 1, 'aaaaa'); 
insert into NULLtest2 values (2, 2, 'bbbbb'); 
insert into NULLtest2 values (3, NULL, 'ccccc'); 


/* 1C: display the table content */ 
select * from NULLtest; 
select * from NULLtest2; 


(бу /* 1D: try to create a primary key on a nullable column */ 
ALTER TABLE NULLtest WITH NOCHECK 
ADD CONSTRAINT PK NULLtest PRIMARY KEY CLUSTERED (colA) 
GO 


(Е) /* 1E: do NULLs truly propagate? Test this string concatenation... */ 
-- first with CONCAT NULL YIELDS NULL turned on and ANSI NULLs turned ON... */ 
select cast(colA as nvarchar) + cast(colB as nvarchar) + colC AS 'Concatenated 
Value' from NULLtest2; 


(Е) /* 1F: get an average value when there's NULL in the mix? */ 
-- first with ANSI NULLS turned on... 
SET ANSI NULLS ON 
SET ANSI WARNINGS ON 
select avg(cast(colB as decimal))from NULLtest2 
-- then with ANSI NULLS turned off... 
SET ANSI NULLS OFF 
SET ANSI WARNINGS ON 
select avg(cast(colB as decimal))from NULLtest2 
-- turn off the ANSI warnings and the warning message goes away... 
SET ANSI NULLS ON 
SET ANSI WARNINGS OFF 
select avg(cast(colB as decimal))from NULLtest2 


© /* 1G: get a sum of values when there's NULL in the mix */ 
-- first with ANSI WARNINGS ON 
SET ANSI WARNINGS ON 
select sum(colA) AS 'Sum of column A' from NULLtest; 
-- then with ANSI WARNINGS turned off... 
SET ANSI WARNINGS OFF 
select sum(colA) AS 'Sum of column A' from NULLtest; 


& /* 1H: what happens when you try to join on NULL? */ 
select * from NULLtest a JOIN NULLtest2 b ON a.colA = b.colB where b.colB is NULL; 
-- no rows returned 


® /* 11: create a "dummy" dimension record for NULL foreign keys */ 
--SET IDENTITY INSERT NULLtest ON 
insert into NULLtest values (-1, ''); 
--SET IDENTITY INSERT NULLtest OFF 


Ф /* 17: substitute -1 for missing foreign keys in the fact table */ 
update NULLtest2 set colB - -1 where colB IS NULL 


/* 1K: what happens when you try to join on NULL? */ 
select * from NULLtest a JOIN NULLtest2 b ON a.colA = b.colB; 


NULL interferes with the operations of cube-building ^ warehouse. But remember, there are no absolutes when 
and adds overhead to cube processing. In addition, — it comes to NULL: Consider the size of the data ware- 
NULL can propagate under specific circumstances, — house, how business requirements are interpreted, and 
leaving you with unpredictable results. I suggest the what works best for you. SQL 
setting NOT NULL for most columns in your data InstantDoc ID 100507 
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Vulnerability 
Scanner Showdown 


AppDetectivePro 5.4.6 
vs. 


AuditPro Enterprise 4.0 


D atabase vulnerability scanners are tools you can 
use to assess the configuration of your database 
servers for security weaknesses that expose them to 
known threats. These scanners can be a critical tool 
in avoiding the financial and legal costs companies of 
all sizes could sustain from a single incident of com- 
promised data. 

The Microsoft Baseline Security Analyzer reports 
missing security patches and configuration-based 
vulnerabilities and is available for free. But here, I 
review two third-party products: Application Security's 
AppDetectivePro (ADP) 5.4.6 and AuditPro Enterprise 
(APE) 4.0 from Network Intelligence (India). These 
products install with predefined tests and sets of tests 
called policies, which can be part of an ongoing pro- 
gram to minimize the risk of your systems and data 
being compromised. Both of these products include 
more comprehensive sets of assessment tests for SQL 
Server. 


AppDetectivePro 5.4.6 
ADP is a vulnerability-assessment tool that probes 
your application servers from another system on 
the network. It tests SQL Server 2005, 


planning to monitor a large number of databases, you 
can instead configure a SQL Server database for better 
scanning performance. 

ADP uses a framework of jobs and tasks to per- 
form vulnerability assessments. Session tasks define 
the applications and IP ports you want ADP to test. 
Discovery tasks locate systems with active ports on 
the network. Policy tasks define the set of tests ADP 
will perform, which can include both predefined and 
user-written tests. Audit and penetration (aka pen) tests 
probe the target systems for vulnerabilities: Audit tests 
assess from within the system, and pen tests simulate 
malicious hacker attacks from outside the system. 

ADP includes a job scheduler that lets you auto- 
mate audit and pen test runs for ongoing assessment. 
It also includes a vulnerability manager to track the 
status of ADP’s findings. ADP will generate scripts to 
correct common configuration problems. 

When installed, ADP launches the Discovery 
Wizard, which prompts you for host names, IP 
addresses, and database systems to scan. The result 
of running the Discovery Wizard is a named session 


2000, and 7.0, including x64, Microsoft «ше» APPDETECTIVEPRO 5.4.6 
Data Engine, and Express editions, The Pros: Easy to install and use; provides a great 


company plans to implement support for 
SQL Server 2008 in second quarter 2009. 
ADP also tests several other platforms, 
including IBM DB2, Lotus Domino, 
Oracle databases, Sybase ASE, and 
MySQL. Application Security licenses 
ADP by the database instance. 

ADP installs on systems running 
Windows Server 2003, Windows XP, or 
Windows 2000, including x64 editions. 
By default, ADP stores results in a 
Microsoft Access database that's created 
when the product is installed. If you're 


set of reports in many formats; performs both unauthenticated 
penetration testing and authenticated audits; thoroughly tests 
for patches, configuration, and authentication 


Cons: UI would benefit from a couple tweaks 


Rating: СЖ СУС 


Price: $900 per database server instance. 


Recommendation: If you're in the market for a tool to help 
you maintain the security of your database servers, make App- 
DetectivePro your first choice. 


Contact: Application Security е 866-927-7732 • 


www.appsecinc.com 
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Figure 1 
AppDetectivePro GUI 


that includes each server instance ADP found during 
the scan. I created a session that included one Win2K 
system hosting SQL Server 2000 and one Windows 
2003 system hosting SQL Server 2005. 

The ADP GUI is your primary interface for con- 
figuring sessions, running audits and pen tests, and 
managing reports. As you can see in Figure 1, the top 
of the GUI provides access to a set of menus. A hierar- 
chical view of the currently loaded session is displayed 
on the left, and a details pane is to its right. By default, 
ADP places all systems in the session in a folder called 
Network. You can create a multilevel hierarchy of 
folders to organize the IP addresses in a session. When 
you've highlighted a test in the session pane, the Details 
tab at the bottom of the right pane shows which policy 
defined the test, a brief summary of testing, and other 
information. The bottom pane lists the vulnerabilities 
discovered by the test. Clicking a vulnerability displays 
its description and suggests remedial action in the 
details pane's Vulnerability Description tab. You can 
find similar information in the Vulnerability Details 
report, which I discuss later. 


AppDetectivePro 

Scans and Reports 

Once you've created and loaded a session, you can 
run an audit or pen test using a custom policy or one 
of ADP’s built-in policies. I ran several of each test, 
most of which took just a few minutes. A test against 
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an old SQL Server 2000 system reported 16 high-risk, 
10 medium-risk, 37 low-risk, and 10 informational 
vulnerabilities. Tests against a SQL Server 2005 system 
reported only three high-risk vulnerabilities (two weak 
passwords and missing updates) and one low-risk vul- 
nerability (failure to use Windows-only authentication 
mode). Pen tests run without supplied authentication 
and can, depending on the particular tests you include 
in the policy, attempt to crack security and gain access 
to the system. When you run a pen test, ADP warns 
you that the testing activity may be logged on the 
target system. 

ADP supports an extensive list of pen and audit 
tests. Pen tests available when you create a custom pen 
test policy include Denial of Service attacks, attacks 
for common user IDs and easily guessed passwords, 
system configuration problems, and known vulner- 
abilities. The application divides audit tests into access 
control, application integrity, identification and pass- 
word control, and OS integrity categories. 

The reporting, based on Crystal Reports and 
accessed via a tests right-click menu, is thorough 
and easy to use. After ADP runs an audit or pen test, 
the results are available for viewing on screen. You 
can export reports in 16 different formats, including 
РОЕ HTML, XML, Excel, and comma-separated 
value files. After running an audit or pen test, ADP 
presents four report options. A vulnerability sum- 
mary is a brief description of the test and a count 


February 2009 27 


Database 
vulnerability 
scanners are a 
critical tool for 
avoiding the 
costs companies 
could sustain 
from a single 
incident of 
compromised 
data. 


VULNERABILITY SCANNERS 


of vulnerabilities found. A vulnerability detail report 
lists much more information. For example, the vulner- 
ability detail report for the test permission on registry 
extended proc listed two extended stored procedures 
with Execute permissions granted to the Public role, 
a description of the vulnerability, and sample syntax 
for a REVOKE T-SQL statement to remove Execute 
permissions from the procedures. A check status report 
includes a two-line summary of each test in the policy 
with results. A user information report lists all accounts 
and the passwords the audit or pen test discovered. The 
report-viewing window has a typical table of contents 
panel along the right that, by default, displays only 
the highest level sections preceded by plus (+) signs. 
I wished for “expand all” and continuous scrolling 
options here but didn't find them. 

The previously described reports all relate to a 
single audit or pen test run, but the Reports button 
at the top of the GUI accesses a set of nine reports 
that are based on data from multiple tests. One useful 
report, Vulnerability Differences, compares two 
audits or pen tests done at different times and reports 
the vulnerabilities that are resolved, unresolved, and 
new between the two. Another report gives the details 
of a specified policy. A summary report graphs 
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Introducing ReportEverywhere — your Mobile 


Business Intelligence with Microsoft SQL Server 
2005 Reporting Services. 


ReportEverywhere extracts data from your reports 


and sends them as instant messages (IM) to 
Reporting Services subscribers’ mobile devices. 


Wi Report delivery to cell phones, smartphones, 
BlackBerrys, iPhones, and virtually any 
IM-enabled mobile devices 
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the vulnerabilities detected during the testing for a 
session. 

ADP has several other features that support your 
efforts to maintain secure systems. The Vulnerability 
Manager feature lets you focus on a particular area 
of interest by filtering test results by subjects such as 
IP address, vulnerability, or severity. The Fix Scripts 
feature generates scripts that you can customize and 
manually apply to correct common configuration 
problems. You can also create custom tests that consist 
of a query and a set of criteria to apply to the result set. 
Another feature facilitates download and installation 
of program updates, ensuring that you have the most 
current program code and testing rules. 

I am impressed by ADP. It's easy to install and 
very easy to use. I found the PDF Help documenta- 
tion and the GUI’s Help files useful. I appreciated 
that ADP can assess a system by using authenticated 
access from the inside as well as attack the system 
using unauthenticated access from the outside. ADP 
includes a useful set of reports and the flexibility to 
export them in your favorite format. I think many 
users will appreciate that ADP not only provides a full 
description of reported vulnerabilities but also suggests 
remedial action, including providing SQL statement 
syntax where appropriate. This application is easy 

to recommend. When you're looking for a data- 
base vulnerability scanner, let AppDetectivePro 
be the first one you evaluate. 


AuditPro Enterprise 4.0 
Network Intelligence (India) describes AuditPro 
Enterprise as a security audit tool rather than a 
vulnerability assessment tool because APE uses 
administrative credentials to authenticate to the 
system being tested. Testing in this way lets the 
product thoroughly assess the system's configura- 
tion, including patch levels, registry contents, and 
NTFS and database permissions. However, APE 
doesn't simulate attacks from outside the system. 

APE assesses systems running under Windows 
2003, XP, Win2K, Red Hat Linux, and Solaris. 
It assesses SQL Server 2005 and 2000, Oracle 
databases, DB2, and Cisco Systems routers. The 
application includes a vulnerability database, 
which it uses to check for known conditions. 
Options in the GUI let you check for updates at 
startup or on demand. 

Named policies define the tests to run against 
a particular system type out of those that APE 
can assess. Selecting an option displays the sets 
of “probes”—individual tests—appropriate to 
that system. You complete a policy by selecting 
the probes you want to run. APE includes 
74 probes for SQL Server systems—a goodly 
number—and a separate set of probes for 
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Windows OSs. OS probe 
sets also include network- 
related testing for open 
ports. APE targets ISO/ 
IEC 27001 compliance and 
includes probes in each key 
application area in support 
of that compliance. 

Named profiles define the 
Systems you want to test, 
together with the needed 
authentication credentials 
and the policy defining the 
probes you want to run 
against the system. APE lets 
you add individual systems 
by NetBIOS host name or 
IP address and choose from 
a display of host names for 
a domain from Active Direc- 
tory (AD). I was surprised to 
discover that APE doesn't let 
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you enter a DNS-style host 
name. When a system is run- 
ning more than one supported application that you 
want to test within a profile, such as Windows and 
SQL Server or SQL Server and Oracle, APE lets you 
provide credentials and select a testing policy for each 
application on the system. Your completed profile is 
a list of systems, each with one or more applications, 
along with necessary authentication credentials and 
testing policy. 

APE seems inconsistent in some features, such as 
its support for Sybase. For example, the application 
shows Sybase as an option in Profile Manager but 
not Policy Manager. The AuditPro Enterprise GUI, 
shown in Figure 2, could be more user-friendly. For 
example, the main UI, Policy Manager, and Profile 
Manager are implemented in windows that you can't 
resize, and several columns are too narrow to show all 
the information. 

The documentation for APE is 
inadequate. Documentation available 
on the Network Intelligence (India) 
website describes the product but pro- 
vides no usage information. When I 
requested more documentation, the 
vendor sent me an eight-page PDF 
that described the installation. and 
usage cycle for APE in general terms. 
The Help installed with APE provides 
information about probes for Win- 
dows, Linux, and DB2, but not for 
SQL Server or Oracle databases or for 
using Probe Manager to create custom 
probes. 
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Using AuditPro Enterprise 

I installed APE on a Windows Server 2003 system 
running SQL Server 2005. I had to run two instal- 
lation modules, one for AuditPro, and a second 
one that the vendor described as a Crystal Reports 
module for advanced reporting features. I used the 
AD discovery feature to create a profile that included 
eight Windows systems with a minimal set of probes 
for each, a profile with a Win2K Server system with 
SQL Server 2000, and a third profile with a Windows 
2003 and SQL Server 2005 system. The latter two I 
configured with the full set of probes for their ver- 
sions of Windows and SQL Server. After running the 
audit for each profile, APE generated a set of HTML 
reports. The high-level report reported the number of 
vulnerabilities detected in five categories, with a link 


AUDITPRO ENTERPRISE 4.0 


Pros: Performs a good selection of tests; tests SQL 
Server and Windows; good at detecting patch status 


Cons: Documentation is inadequate; UI is inflexible; some fea- 
tures didn't work during testing 


Rating: о хехе 


Price: $800 per host for scanning databases; $400 per host 
for scanning OSs 


Recommendation: AuditPro Enterprise isn't ready for prime 
time, and 1 don't recommend it. 


Contact: Network Intelligence (India) e 
(91) (22) 28-39-26-28 * www.niiconsulting.com 
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to a detail report for each system and application— 
in this case, one report for the Windows probes and 
a separate report for the SQL Server probes. In each 
case, the tests for a single target system completed 
in only a few minutes, and APE reported a set of 
vulnerabilities similar to that reported by ADP. The 
summary results matrices in both the GUI, shown in 
Figure 2, and the summary report include hotlinks 
to the detail information, but the links produced only 
blank reports. 
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м 4 51,499 
Data Dynamics Analysis 
is the first interactive graphical analysis 
component for Windows Forms and ASP.NET 
applications. This tool facilitates real time 
data analysis and promotes the exploration 
of relational and multidimensional data 
sources with simple drag-and-drop operations. 
Developers can embed cutting edge data 
visualization functionality directly into any .NET 
application. Transform raw data into feature-rich 
charts and pivot tables delivering a powerful 
and user friendly experience. 
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| $2,499 bundle price! 


Go Ahead, Show Off 


created to handle reports, dashboards, invoices, 
and other documents. The feature rich package 
allows authors to focus on creating documents 
in the intuitive designer instead of writing code. 


Dashboards, calendars, XHTML, mail merge, 
charts, tables, cross-tabs, free-form lists, data 
visualizations, and report parameters are just some 
of the features available right out of the box. 


XHTML and Mail Merge Support 

The Formatted Text report item allows report 
authors to insert XHTML content into their 
reports and it has full support for mail merge 
functionality. 


Data Visualizations 

Graphical representations make it easy to 
understand data. Data visualizations create 
graphics based on your data. Those reading your 
documents can now easily spot the important 
numbers. 


— DATA 
— DYNAMICS _Www.datadynamics.com 


Tel: (614) 895-3142 


a Grape Gy. company 


Excel/Word/PDF Exports 

Take reports with you in any of the 
supported formats: send them out, 
print them out, or just analyze the 
numbers. 


Dashboards 

Dashboard centric controls make it easy 
to create dashboard, use the controls 
anywhere you need to examine 
numbers and trends at a glance. 


The detail report lists the detailed results of each 
probe, reporting and assigning a severity level to each 
vulnerability tested and giving a value of OK or a risk 
level of low, medium, or high. APE also calculates a 
weighted vulnerability score, assigning a value of 1, 2, 
or 3 to low-, medium-, and high-risk vulnerabilities, 
respectively, and reporting the total. For Windows, 
the report lists security-related updates, open IP ports, 
running services and processes, local security policy 
settings, administrative users, and an analysis of event 
log settings, to name a few. For SQL Server, the 
report includes authentication and authorization 
information, such as members of the sysadmin 
role, execute permissions assigned to various stored 
procedures, the state of login auditing, and SQL 
Server trace settings. 

I eventually discovered a Settings menu option, 
used to change the console password and create a 
database where APE stores audit results, a procedure 
described in updated documentation I eventually 
received for APE. I created the database, which 
included four user tables. After I ran some audits, 
the Advanced Reporting option presented all those 
audits as available for comparison and reporting, 
but none of the four report types (generic report, 
trending analysis, audit results report, software 
inventory) produced a report. Considering the 
absolute dearth of documentation around the 
installation, configuration, and use of the reporting 
component, I chose not to investigate further. 

Overall, APE is not ready for prime time. 
Perhaps if the documentation were complete enough 
to describe how to configure and use the product in 
greater detail, Га have had a different experience. 
As it is, the HTML-based detail reports generated 
directly by running an audit provide a lot of useful 
detail information and can be used as a checklist to 
lock down security on a system. 


A Clear Winner 
APE can't do penetration tests but generally per- 
forms well as a scanner. It can detect a wide variety 
of vulnerabilities and helps with ISO/IEC 27001 
compliance. However, АРЕ? interface is difficult 
to use, its documentation is incomplete and insuf- 
ficient, and some of its reporting features seem 
nonfunctional. ADP surpasses APE with audit 
scans that are at least as good as АРЕ, extensive 
penetration tests, a much better UI, and excellent 
documentation. While APE generally tells you 
what to do to fix problems, ADP provides more 
thorough explanations and, frequently, step-by- 
step procedures. І have to award my Editor's 
Choice to ADP In all respects, it's the more com- 
plete product. SOLI 
InstantDoc ID 100994 
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APPLICATION DEVELOPMENT Q Editors Tip 
Developer Tool Improves Code Quality 


ments to products (0) 
sqlmag.com 


SQL Assistant 4.0 is now available from SoftTree Technologies. The new version improves code quality and code Got a great 
accuracy by providing developers with SQL programming productivity tools. It assists with code typing and — new product? 
provides SQL IntelliSense- features and a real-time syntax checker. In addition, it lets you customize the code бер announce- 
format based on developers' coding habits. SQL Assistant 4.0 supports SQL Server 2008, 2005, and 2000; Oracle; 
MySQL; IBM DB2; Sybase ASA and ASE; and PostgreSQL. Pricing starts at $149. For more information about 
SQL Assistant 4.0, email sales@softtreetech.com or visit www.softtree.com. — Jeff James, 
REPORTING Editor-in-Chief 
Generate Custom Reports via a Web Browser 

Izenda recently released Izenda Reports 5.6, the latest version of its self- 
service reporting platform. Version 5.6 lets business users reorganize and 
summarize data in a spreadsheet or database table to create a custom 
report, and includes visual grouping, dynamic fields, and the ability to 
divide a document into pages. Izenda Reports is now compatible with 
Mozilla FireFox 3.0, handles timeouts better, and has improved multiyear 
date grouping and font support for PDFs. Izenda 5.6 supports SQL Server 
2008, 2005, and 2000. Introductory pricing begins at $250 per user. To 
learn more or to view a demo of the product, call 404-835-8640 or go to 
www.izenda.com. 


BUSINESS INTELLIGENCE 

Jedox Provides an Open-Source, In-Memory 
BI Solution 

Jedox’s Palo Server, an in-memory product, can retrieve data faster than relational databases 
and improve system performance. Jedox offers several server applications that extend Palo 
Server’s functionality, including applications that extend Palo Server’s web reporting and data 


entry capabilities. The current version, Palo Server 2.5, offers increased speed, a calculation | № \ m 
engine, compatibility with the ODBO/MDX standard, and support for Microsoft Office | [| Ра!о 
2007% ribbon UI, among other things. Available as an open-source solution or as a commer- ‹ "i pion analyse report 
cial license, Palo Server runs on Windows, Linux, and UNIX. For more information, email ? 

v 


sales@jedox.com or visit www.jedox.com. 


SCRIPTING 


Three Tools in One PowerShell Scripting Environment 


To help SQL Server and Windows professionals in their efforts to automate solutions through 
Windows PowerShell scripting, Idera released PowerShellPlus Professional Edition, an interac- следват 
tive scripting environment for PowerShell. PowerShellPlus offers three tools in one: a learning 


and help center to learn how to use the product, an interactive console to write and run Pow- 
erShell commands and scripts, and a code editor and debugger to test and debug the scripts. 
PowerShellPlus Professional Edition costs $145 per user. For more information, contact Idera 
at 713-523-4433 or visit www.idera.com. 


CLOUD COMPUTING 

Analyze ВІ Data Through the Cloud 

Panorama Software has added a flash-enabled rich UI to its data analysis and pivot table solution for Google 
Apps. Panorama Analytics for Google Apps enables consumer and enterprise users to take advantage of the power 
of analytics using a Software-as-a-Service model. The goals of the launch are to make data analysis so simple that 
any information worker or consumer can use it and to enable Google Apps to analyze enterprise line-of-business 
data. To learn more, call 416-545-0990 or browse to www.panorama.com. 500] 
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for Windows IT Pro and SQL Server Magazine 
and author of Microsoft SQL Server 2008 New 
Features (Osborne/McGraw-Hill). 


irthdays are fun (assuming no one takes you to 
Steakhouse Corral, where the servers sing you 


T Top 5 SQL Server 
Engineers Blog Posts 


о ne of the best undiscovered SQL Server resource 
gems is the Microsoft Customer Service and 
Support (CSS) SQL Server Engineers blog, at blogs 


.msdn.com/psssql/archive/tags/default.aspx. If you're 


troubleshooting SQL Server problems or want to learn 
more about the internal workings of SQL Server, the 
posts at this blog can help. They're provided by the 
CSS SQL Escalation Services team at Microsoft—the 
folks who answer the phone when customers call in 
with problems. Here are the top five most interesting 
posts and topics. 


Running SQL Server 

in a Virtual Environment 

Microsoft now supports SQL Server on Hyper-V as 
well as on validated Server Virtualization Validation 
Program configurations (which include VMware 
ESX Server). To learn what the CSS team will sup- 
port as far as helping you run SQL Server in a virtual 


environment, read the post at blogs.msdn.com/psssql/ 
archive/2008/10/08/sgl-server-support-in-a-hardware- 


virtualization-environment.aspx. 


Performance 

Even when things are running well, performance 

is one of a DBAS hot buttons. Click the Perfor- 

mance tag to read about query plans, application 

row locking and blocking, and using per-query 
parallelism. 


"SQL PASS 2008 
InstantDoc ID 1008: 


Метоғу 
Understanding how SQL Server uses memory is 
one of the most important steps to solving many 
SQL Server performance problems. The Memory 
tag gathers posts on such topics as SQL Server 2005 
memory limits (as well as the memory limits for 
the different Windows Server releases), using the 
SOL Server 2008 Resource Governor, and under- 
standing working set trim problems. Go to blogs 


.msdn.com/psssgl/archive/tags/Memory/default 


.aspx. 


How It Works 

The How It Works tag covers a broad landscape of 
SQL Server problems, from SQL Command mode 
parsing to using SQLIOSim and DBCC Shrink. Check 
out these posts at blogs.msdn.com/psssql/archive/tags/ 
How- Itt Works/default.aspx. 


Troubleshooting the Database 
Engine 

When you're troubleshooting the database engine—a 
core concern of all DBAs, turn to the posts at the 
Troubleshooting the DB Engine tag. These posts offer 
tips, workarounds for problems, information on new 
features, and more. Go to blogs.msdn.com/psssql/ 


archive/tags/Troubleshooting 3A00_+The+DB+ 
Engine/default.aspx. 


50Ц 
InstantDoc ID 101086 


"i... - 
ast with- Tom Casey,” 


a rootin' tootin' birthday tribute as they bring you 
4,000 calories topped with ice cream and flaming 
candles). But they're even better when you can divert 
the attention to someone else. This February, not only 
age | don’t plan to divulge, but SQL 

erver Magazine also observes a special occasion: 
10 years in circulation! To celebrate, Гуе compiled 
a list of resources about Kilimanjaro—Microsoft's 


_ upcoming SQL Server arrival—scheduled to come, 
| like birthdays as you | grow older, way too soon. 


SQL Server Magazine, February 2009. Vol. 11, No. 2 


"The Madison Solution and the Kilimanjaro Release 
Explained," InstantDoc ID 100482 


What our plans for the SQL Server Kilimanjaro 
release? її Poll Results, www.sqlmag.com/go/ 


PollKilimanjaro 


“Ready? Set? Kilimanjaro!” InstantDoc ID 100840 
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SQLSENTRY қ 
PerformanceAdvisor ° 


The New Standard in Monitoring and Performance 


" Chi LL M LIU [] " 


* Patent-pending graphical view of your server's disk topology and activity. 


"ат 
* Shows you exactly how data is moving through your system, highlighting p "| 


bottlenecks at the database file, physical disk, or controller level. 
SQL Server Disk Activity 


* View disk bottlenecks in real-time mode, or historical mode for any date range. 


* Easily identify common configuration problems such as mixing busy data and 


transaction log files on the same physical drive. m = | 
т руун 


* Graphical display of SQL Server disk space utilization by database enables you 
to understand and effectively manage disk capacity issues. 


SQL Server Disk Space 


* Performance Dashboard with relevant SOL Server • Top SQL analysis highlights heaviest queries 


stus) DEUS IS * Graphical blocking and deadlock analysis 
* Real-time and historical performance analysis * Calendar views of Top SQL, blocks and deadlocks 
* Disk activity, latency, and capacity monitoring “ One-click and automated tracing with Quick Trace?" 


Free Trial Download: sgqlsentry.net/sql-performance SENTRY 
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feature іп SQL diagnostic manager gives you the power to go back 


The new 


in time to pinpoint and diagnose SOL Server performance issues that happened hours, days, 
weeks, or even months ago. Now you can quickly and easily diagnose old problems or 


investigate SOL Server issues that may be happening at a particular time of day. 


With over 10 
Our produ 


м History Browser 


O SQL Servers monitored worldwide, Idera leads the market in SQL Server performance and diagnost 


‚бош; 


Rewind back to the exact time 
a problem occurred 


View key SQL Server 
performance metrics 


Diagnose and solve problems 


olutions. 


e easy to use and low-impact. What's more, you'll be up and running in minutes! WWW.idera.com 


